Conversation
Implements the CLI half of hosted-inference login against the gateway
contract: postil login opens a device-authorization flow (RFC 8628-style),
polls for approval, and stores the resulting token at
${XDG_CONFIG_HOME:-~/.config}/postil/credentials.json. postil logout revokes
it server-side and always removes the local file, even when that call fails.
The stored token is a fallback in api key resolution, used only when none of
POSTIL_API_KEY/OPENROUTER_API_KEY/MODEL_API_KEY/LLM_API_KEY is set; when used,
its apiBase and model apply unless POSTIL_API_BASE/REVIEW_MODEL override them.
This is applied even when the credential is expired (routing information
only, not a secret) so require_model and postil doctor can still run and
report the expiry with one actionable "run postil login again" message
instead of a generic missing-model or upstream auth error. The precedence is
documented alongside the existing config.rs precedence comment and in
docs/configuration.md.
The credentials file and its containing directory get their final
permission bits (0600 / 0700) set at creation via OpenOptionsExt/
DirBuilderExt, matching the existing atomic-write pattern used for other
private receipt files in this codebase, so there is no window where the
token is briefly world-readable, and writes are never followed by a
separate chmod.
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
postil loginauthorizes a device against the control plane and stores a short-lived credential, so a first-time user can review without obtaining a model provider key first. The credential lives in the user config directory at mode 0600 under a 0700 directory, written to its final mode at creation rather than adjusted afterwards, and it acts as a fallback behind the four existing key environment variables so an explicit key still wins. An expired credential produces one instruction to log in again rather than a provider authentication error, andpostil doctorreports whether a credential is present and when it expires. The token never appears in output.