enumeray auth login

Log in through a browser with PKCE, or save an existing API token from stdin.

Use when: A profile has been configured and needs a verified identity for API operations.

Role and prerequisites: Any account. Install the CLI and configure the intended API origin. No existing login is required. Browser login needs the service’s identity provider and a local callback; token-stdin needs an existing private bearer token and me:read to verify its account.

Example

enumeray --profile research auth login
# Existing token received in a private JSON credential file:
jq -r .token credential.json | enumeray --profile research auth login --token-stdin

The jq example requires jq and a private credential.json from your administrator. Never paste the bearer token into arguments or version control.

Inputs and options

Input	Meaning and use
--token-stdin	Read an existing API bearer token from standard input and verify it with the service, instead of browser login. Supply only the token text, for example jq -r .token credential.json | enumeray auth login --token-stdin.
--no-browser	Print the authorization URL without opening a browser automatically. Complete it manually while the CLI waits for the local callback; this does not disable PKCE.

Every command also accepts the profile, API, JSON and timeout options.

Result and next step

Verifies the identity and writes credentials privately to the selected profile. Browser login requires the service auth/config endpoint and waits up to 180 seconds.

Run auth whoami to check the stable user ID; see login troubleshooting.

Exact syntax, defaults and accepted values

Browser-assisted authorization code login with PKCE; API must expose auth/config

Usage: enumeray auth login [OPTIONS]

Options:
      --api <API>          User API origin override; credentials never cross origins. Host/runner commands use explicit configuration
      --token-stdin        Read an existing API token from stdin instead of using a browser
      --no-browser         Print the authorization URL but do not launch a browser
      --profile <PROFILE>  Named local user API/login profile; host/runner commands use explicit configuration [default: default]
      --config <CONFIG>    Private user profiles file; defaults to $XDG_CONFIG_HOME/enumeray/profiles.json or ~/.config/enumeray/profiles.json
      --json               Emit user API results as JSON (NDJSON for following logs) and runtime errors on stderr; host/runner output follows its own protocol
      --timeout <TIMEOUT>  User API HTTP timeout in seconds; live logs use it for read inactivity. Does not limit execution time [default: 60]
  -h, --help               Print help