Add a command that exchanges the configured key and secret for a token and prints it to stdout, so it can be captured:
export CONDUCTOR_AUTH_TOKEN=$(conductor auth token)
aws ecr get-login-password and gcloud auth print-access-token exist for exactly this.
Today
No command prints a minted token. whoami mints one at cmd/whoami.go:41, reads the claims, and discards it. So the fetch already exists — conductor auth token or whoami --token is mostly plumbing.
Also worth deciding
With key, secret and token all set, the token wins (cmd/root.go:164). If it has expired the command fails instead of falling back to the key and secret. That rule is only a code comment.
Found while reviewing #113.
Add a command that exchanges the configured key and secret for a token and prints it to stdout, so it can be captured:
aws ecr get-login-passwordandgcloud auth print-access-tokenexist for exactly this.Today
No command prints a minted token.
whoamimints one atcmd/whoami.go:41, reads the claims, and discards it. So the fetch already exists —conductor auth tokenorwhoami --tokenis mostly plumbing.Also worth deciding
With key, secret and token all set, the token wins (
cmd/root.go:164). If it has expired the command fails instead of falling back to the key and secret. That rule is only a code comment.Found while reviewing #113.