Skip to content

Automated SciToken acquisition in the fdp CLI #11

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
sammuli merged 25 commits into from
Jun 23, 2026
Merged

Automated SciToken acquisition in the fdp CLI #11

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
25 commits
Select commit Hold shift + click to select a range
e0bf90c
feat: add ZarrStoreResolver and HttpCatalogResolver
sammuli Jun 6, 2026
b5fae54
feat: dispatch zarr_store/http_catalog locators in _wrap
sammuli Jun 6, 2026
7f5a80a
refactor: locator-driven env emission; clean env for public devices
sammuli Jun 6, 2026
77bf469
refactor: share device-config + bearer resolution between setup_envir…
sammuli Jun 6, 2026
7748b7d
docs: note single-device assumption in apply_environment (review foll…
sammuli Jun 6, 2026
09154e6
refactor: decouple LLM backend/preset from the device catalog
sammuli Jun 7, 2026
db5c4a4
feat: emit PTDATA_JSON_INDEX_PATTERN; update parity fixture
sammuli Jun 16, 2026
732a979
feat: PtDataResolver resolves index_pattern via ptdata._core
sammuli Jun 16, 2026
5025784
build: require fdp-schema >=0.2.1 (needs index_pattern field)
sammuli Jun 17, 2026
454def1
docs: design for automated SciToken acquisition in fdp CLI
sammuli Jun 22, 2026
54387de
docs: implementation plan for automated SciToken acquisition
sammuli Jun 22, 2026
9e5e90e
feat(auth): add fdp.auth module with decode_exp
sammuli Jun 22, 2026
c432e6f
fix(auth): decode_exp returns None for non-string input
sammuli Jun 22, 2026
0bc6c28
feat(auth): get_valid_token resolution precedence
sammuli Jun 22, 2026
7c3a2b0
refactor(auth): document explicit contract; tidy tests
sammuli Jun 22, 2026
9c25e74
feat(auth): pelican shell-out, login, logout
sammuli Jun 22, 2026
a8f5bd3
refactor(auth): tidy test imports, harden cache dir mode, strengthen …
sammuli Jun 22, 2026
ebdafea
feat(auth): ensure_token with auto-login gating
sammuli Jun 22, 2026
7aac8c2
fix(auth): silence auto-login warning on explicit opt-out
sammuli Jun 22, 2026
a21eba8
feat(env): route bearer-token resolution through fdp.auth
sammuli Jun 22, 2026
ca2256c
refactor(auth): public bearer_env, migration warning, opt-out consist…
sammuli Jun 22, 2026
4acf899
feat(cli): fdp login/logout and auto-login on fdp run
sammuli Jun 22, 2026
3eedb6e
refactor(cli): guard device resolution, fix test catalog isolation
sammuli Jun 22, 2026
14753f9
docs: document fdp login/logout and auto-login
sammuli Jun 22, 2026
9820ce0
harden(auth): create token cache file 0600 from the start; backfill t…
sammuli Jun 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 9 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1,10 @@
# fdp

## Authentication

`fdp login` mints a SciToken via the pelican GitHub-OAuth flow and caches it
under `~/.fdp/cache/<device>.token`. `fdp run ...` auto-acquires a token when
none is valid and the session is interactive; set `FDP_NO_AUTO_LOGIN=1` to
disable that (e.g. in batch jobs). `fdp logout` deletes the cached token.
`fdp env` never launches the flow. Resolution order: `-t/--bearer-token`,
then `$BEARER_TOKEN`, then the managed cache, then the legacy `~/.fdp/token`.
Loading
Loading