Update CLI authentication to store login

[codyaray]

We use LDAP for authentication. I've been sharing this one-liner with all of our internal users:

export ST2_AUTH_TOKEN=$(st2 auth `whoami` -t)

As a new user this is definitely non-intuitive. It'd be really nice to support a mechanism like

st2 login

While you could require your username, you could also just default to the current user name since thats how many (most?) corporate environments would be setup with ldap anyway.

Or you can prompt with default like:

$ st2 login
Username [default <user>]: <prompt for input>
Password: <prompt for input>

Or skip straight to username and optional password

$ st2 login `whoami` -p $PASSWORD

Lots of ways to skin the cat. But the business objective here is to make it easier for new/occasional end-users to authenticate.

[Mierdin]

@codyaray It seems like much of what you suggested for st2 login is already supported by the existing st2 auth option - the only thing that's missing is that st2 auth doesn't export to ST2_AUTH_TOKEN by default.

If st2 auth had an option to auto-export this, would that solve this problem in your mind?

[codyaray]

Yep. Just didn't know if you wanted to piggyback or not. Either way works for me. :)

…

-Cody

On Dec 13, 2016 7:43 PM, "Matt Oswalt" ***@***.***> wrote: @codyaray <https://github.com/codyaray> It seems like much of what you suggested for st2 login is already supported by the existing st2 auth option - the only thing that's missing is that st2 auth doesn't export to ST2_AUTH_TOKEN by default. If st2 auth had an option to auto-export this, would that solve this problem in your mind? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#3110 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AACsHuJXzWDbPsul88lAe0M2ormSKvW0ks5rH0mwgaJpZM4LMC-D> .

[Mierdin]

@codyaray The difficulty is that st2client won't be able to modify the environment of the parent shell due to the way environments work in Linux. This is why many tools that use this approach recommend you set the env yourself first.

We may be able to do something a little different to accomplish the same goal, however. Stay tuned here, I'll let you know if I come up with anything

[codyaray]

My thought would be writing the token to disk with a TTL using filecachetools or something

…

On Dec 14, 2016 11:46 AM, "Matt Oswalt" ***@***.***> wrote: @codyaray <https://github.com/codyaray> The difficulty is that st2client won't be able to modify the environment of the parent shell due to the way environments work in Linux. This is why many tools that use this approach recommend you set the env yourself first. We may be able to do something a little different to accomplish the same goal, however. Stay tuned here, I'll let you know if I come up with anything — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#3110 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AACsHtF8rPFRkLgRCK514H8yBFqo4qzJks5rICuPgaJpZM4LMC-D> .

[Mierdin]

@codyaray See #3123 - hopefully that is going in the right direction.

[codyaray]

awesome!

…

On Thu, Dec 15, 2016 at 7:39 PM, Matt Oswalt ***@***.***> wrote: @codyaray <https://github.com/codyaray> See #3123 <#3123> - hopefully that is going in the right direction. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#3110 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AACsHirQsL1EwEzPb98AyIOQHXNfi77sks5rIevqgaJpZM4LMC-D> .

[Mierdin]

@codyaray Apologies for the delay on this. Lots of other things came up during the holiday season, but I wanted to make sure this got in before our next release. #3123 has been merged - I encourage you to check out the 2.2 release when it comes out and try the new feature.

Thanks for reporting this!

[codyaray]

Thank you!

…

On Tue, Feb 7, 2017 at 12:10 PM, Matt Oswalt ***@***.***> wrote: @codyaray <https://github.com/codyaray> Apologies for the delay on this. Lots of other things came up during the holiday season, but I wanted to make sure this got in before our next release. #3123 <#3123> has been merged - I encourage you to check out the 2.2 release when it comes out and try the new feature. Thanks for reporting this! — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#3110 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AACsHmy68ZiRrgSKpESpl1M5BK25c10pks5raLOJgaJpZM4LMC-D> .