miki3421 opened a new pull request, #29:
URL: https://github.com/apache/openserverless-cli/pull/29

   ## Summary
   
   This PR adds transparent SSO support to the `ops` CLI. When SSO is enabled 
in configuration, `ops -login` uses OIDC device flow instead of prompting for 
local OpenServerless username/password credentials.
   
   ## Changes
   
   - Add OIDC device-flow login with PKCE.
   - Add `ops config sso` command support.
   - Preserve existing password login behavior when SSO is disabled.
   - Avoid persisting or exposing the OIDC access token.
   - Update login behavior so SSO-enabled environments can reach the same local 
`AUTH` / `.wskprops` state as legacy login.
   - Add tests for SSO config and login behavior.
   
   ## Validation
   
   - `git diff --check`
   - `go test ./...` was not run locally because `go` is not available in the 
current environment.
   
   ## Notes
   
   The user-facing login command remains unchanged. SSO is selected from 
configuration/environment, so existing non-SSO workflows continue to work as 
before.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to