mirror of
https://github.com/tailscale/tailscale.git
synced 2024-11-29 13:05:46 +00:00
9b6e48658f
Adds a parameter for create key that allows a number of seconds (less than 90) to be specified for new keys. Fixes https://github.com/tailscale/tailscale/issues/7965 Signed-off-by: Matthew Brown <matthew@bargrove.com>
77 lines
2.0 KiB
Go
77 lines
2.0 KiB
Go
// Copyright (c) Tailscale Inc & AUTHORS
|
|
// SPDX-License-Identifier: BSD-3-Clause
|
|
|
|
// get-authkey allocates an authkey using an OAuth API client
|
|
// https://tailscale.com/s/oauth-clients and prints it
|
|
// to stdout for scripts to capture and use.
|
|
package main
|
|
|
|
import (
|
|
"context"
|
|
"flag"
|
|
"fmt"
|
|
"log"
|
|
"os"
|
|
"strings"
|
|
|
|
"golang.org/x/oauth2/clientcredentials"
|
|
"tailscale.com/client/tailscale"
|
|
)
|
|
|
|
func main() {
|
|
// Required to use our client API. We're fine with the instability since the
|
|
// client lives in the same repo as this code.
|
|
tailscale.I_Acknowledge_This_API_Is_Unstable = true
|
|
|
|
reusable := flag.Bool("reusable", false, "allocate a reusable authkey")
|
|
ephemeral := flag.Bool("ephemeral", false, "allocate an ephemeral authkey")
|
|
preauth := flag.Bool("preauth", true, "set the authkey as pre-authorized")
|
|
tags := flag.String("tags", "", "comma-separated list of tags to apply to the authkey")
|
|
flag.Parse()
|
|
|
|
clientID := os.Getenv("TS_API_CLIENT_ID")
|
|
clientSecret := os.Getenv("TS_API_CLIENT_SECRET")
|
|
if clientID == "" || clientSecret == "" {
|
|
log.Fatal("TS_API_CLIENT_ID and TS_API_CLIENT_SECRET must be set")
|
|
}
|
|
|
|
if *tags == "" {
|
|
log.Fatal("at least one tag must be specified")
|
|
}
|
|
|
|
baseURL := os.Getenv("TS_BASE_URL")
|
|
if baseURL == "" {
|
|
baseURL = "https://api.tailscale.com"
|
|
}
|
|
|
|
credentials := clientcredentials.Config{
|
|
ClientID: clientID,
|
|
ClientSecret: clientSecret,
|
|
TokenURL: baseURL + "/api/v2/oauth/token",
|
|
Scopes: []string{"device"},
|
|
}
|
|
|
|
ctx := context.Background()
|
|
tsClient := tailscale.NewClient("-", nil)
|
|
tsClient.HTTPClient = credentials.Client(ctx)
|
|
tsClient.BaseURL = baseURL
|
|
|
|
caps := tailscale.KeyCapabilities{
|
|
Devices: tailscale.KeyDeviceCapabilities{
|
|
Create: tailscale.KeyDeviceCreateCapabilities{
|
|
Reusable: *reusable,
|
|
Ephemeral: *ephemeral,
|
|
Preauthorized: *preauth,
|
|
Tags: strings.Split(*tags, ","),
|
|
},
|
|
},
|
|
}
|
|
|
|
authkey, _, err := tsClient.CreateKey(ctx, caps, 0)
|
|
if err != nil {
|
|
log.Fatal(err.Error())
|
|
}
|
|
|
|
fmt.Println(authkey)
|
|
}
|