chore(make): add verification-token target for multi-stand email lookup
make verification-token EMAIL=… STAND=local|dev|ift|stage|calentiq fetches admin verification token via Admin API. [skip ci]
This commit is contained in:
@@ -1,5 +1,5 @@
|
||||
.PHONY: help clean compile shell test eunit test-api test-all \
|
||||
dialyzer xref cover docs release run stop logs
|
||||
dialyzer xref cover docs release run stop logs verification-token
|
||||
|
||||
# Цвета для вывода (только для команд, где нужны)
|
||||
GREEN := \033[0;32m
|
||||
@@ -352,6 +352,12 @@ docker-swarm-shell:
|
||||
# ============================================================================
|
||||
# UTILITIES
|
||||
# ============================================================================
|
||||
# STAND=local|dev|ift|stage|calentiq (default local). Overrides: ADMIN_API_HOST, ENV_FILE, ADMIN_*/SMOKE_ADMIN_*
|
||||
verification-token: ## Token: make verification-token EMAIL=u@x STAND=ift|stage|dev|local|calentiq
|
||||
@test -n "$(EMAIL)" || (echo "Usage: make verification-token EMAIL=user@x STAND=ift" >&2; exit 1)
|
||||
@STAND="$(STAND)" ADMIN_API_HOST="$(ADMIN_API_HOST)" ENV_FILE="$(ENV_FILE)" \
|
||||
bash scripts/get-verification-token.sh "$(EMAIL)"
|
||||
|
||||
status: ## Проверить статус сервера
|
||||
@echo "Проверка статуса сервера..."
|
||||
@if curl -s http://localhost:8080/health > /dev/null 2>&1; then \
|
||||
|
||||
@@ -0,0 +1,215 @@
|
||||
#!/usr/bin/env bash
|
||||
# Get email verification token via Admin API (multi-stand).
|
||||
# Usage: get-verification-token.sh <email>
|
||||
# Env: STAND=local|dev|ift|stage|calentiq [ADMIN_API_HOST] [ENV_FILE] [ADMIN_*|SMOKE_ADMIN_*]
|
||||
# stdout: token only; stderr: stand / user_id / expires_at
|
||||
set -euo pipefail
|
||||
|
||||
ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
||||
TARGET_EMAIL="${1:-}"
|
||||
STAND="${STAND:-local}"
|
||||
|
||||
if [[ -z "${TARGET_EMAIL}" ]]; then
|
||||
echo "Usage: STAND=ift get-verification-token.sh user@example.com" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# Make may pass empty ADMIN_API_HOST= / ENV_FILE= — treat as unset.
|
||||
[[ -z "${ADMIN_API_HOST:-}" ]] && unset ADMIN_API_HOST || true
|
||||
[[ -z "${ENV_FILE:-}" ]] && unset ENV_FILE || true
|
||||
|
||||
# Preserve explicit creds so ENV_FILE does not override CLI/make env.
|
||||
_PRE_SMOKE_ADMIN_EMAIL="${SMOKE_ADMIN_EMAIL:-}"
|
||||
_PRE_SMOKE_ADMIN_PASSWORD="${SMOKE_ADMIN_PASSWORD:-}"
|
||||
_PRE_ADMIN_SUPER_EMAIL="${ADMIN_SUPER_EMAIL:-}"
|
||||
_PRE_ADMIN_SUPER_PASSWORD="${ADMIN_SUPER_PASSWORD:-}"
|
||||
_PRE_ADMIN_EMAIL="${ADMIN_EMAIL:-}"
|
||||
_PRE_ADMIN_PASSWORD="${ADMIN_PASSWORD:-}"
|
||||
|
||||
case "${STAND}" in
|
||||
local)
|
||||
DEFAULT_ADMIN_API="http://localhost:8445"
|
||||
ENV_CANDIDATES=(
|
||||
"${ROOT}/docker/.env"
|
||||
"${ROOT}/.env.development"
|
||||
)
|
||||
ALLOW_FALLBACK_CREDS=1
|
||||
;;
|
||||
dev)
|
||||
DEFAULT_ADMIN_API="https://admin-api.dev.eventhub.local"
|
||||
ENV_CANDIDATES=(
|
||||
"${ROOT}/docker/.env"
|
||||
)
|
||||
ALLOW_FALLBACK_CREDS=1
|
||||
;;
|
||||
ift)
|
||||
DEFAULT_ADMIN_API="https://admin-api.ift.eventhub.local"
|
||||
ENV_CANDIDATES=(
|
||||
"${ROOT}/docker/.env.ift"
|
||||
)
|
||||
ALLOW_FALLBACK_CREDS=0
|
||||
;;
|
||||
stage)
|
||||
DEFAULT_ADMIN_API="https://admin-api.stage.eventhub.local"
|
||||
ENV_CANDIDATES=(
|
||||
"${ROOT}/docker/.env.stage"
|
||||
"${HOME}/.cursor/secrets/eventhub-stage.env"
|
||||
"/mnt/c/Users/alexc/.cursor/secrets/eventhub-stage.env"
|
||||
)
|
||||
ALLOW_FALLBACK_CREDS=0
|
||||
;;
|
||||
calentiq)
|
||||
DEFAULT_ADMIN_API="https://admin-api.stage.calentiq.com"
|
||||
ENV_CANDIDATES=(
|
||||
"${ROOT}/docker/.env.stage"
|
||||
"${HOME}/.cursor/secrets/eventhub-stage.env"
|
||||
"/mnt/c/Users/alexc/.cursor/secrets/eventhub-stage.env"
|
||||
)
|
||||
ALLOW_FALLBACK_CREDS=0
|
||||
;;
|
||||
*)
|
||||
echo "Unknown STAND=${STAND} (expected: local|dev|ift|stage|calentiq)" >&2
|
||||
exit 1
|
||||
;;
|
||||
esac
|
||||
|
||||
ADMIN_API="${ADMIN_API_HOST:-$DEFAULT_ADMIN_API}"
|
||||
ADMIN_API="${ADMIN_API%/}"
|
||||
|
||||
resolve_env_file() {
|
||||
if [[ -n "${ENV_FILE:-}" ]]; then
|
||||
if [[ ! -f "${ENV_FILE}" ]]; then
|
||||
echo "ENV_FILE not found: ${ENV_FILE}" >&2
|
||||
exit 1
|
||||
fi
|
||||
printf '%s\n' "${ENV_FILE}"
|
||||
return
|
||||
fi
|
||||
local f
|
||||
for f in "${ENV_CANDIDATES[@]}"; do
|
||||
if [[ -f "${f}" ]]; then
|
||||
printf '%s\n' "${f}"
|
||||
return
|
||||
fi
|
||||
done
|
||||
printf '\n'
|
||||
}
|
||||
|
||||
load_admin_creds_from_file() {
|
||||
local file="$1"
|
||||
[[ -n "${file}" ]] || return 0
|
||||
set -a
|
||||
# shellcheck disable=SC1091
|
||||
source <(sed $'s/\xEF\xBB\xBF//' "${file}" | tr -d '\r' | grep -E '^(ADMIN_SUPER_|ADMIN_EMAIL=|ADMIN_PASSWORD=|SMOKE_ADMIN_)' || true)
|
||||
set +a
|
||||
}
|
||||
|
||||
ENV_RESOLVED="$(resolve_env_file)"
|
||||
if [[ -n "${ENV_RESOLVED}" ]]; then
|
||||
load_admin_creds_from_file "${ENV_RESOLVED}"
|
||||
fi
|
||||
|
||||
# Restore CLI/make overrides
|
||||
[[ -n "${_PRE_SMOKE_ADMIN_EMAIL}" ]] && SMOKE_ADMIN_EMAIL="${_PRE_SMOKE_ADMIN_EMAIL}"
|
||||
[[ -n "${_PRE_SMOKE_ADMIN_PASSWORD}" ]] && SMOKE_ADMIN_PASSWORD="${_PRE_SMOKE_ADMIN_PASSWORD}"
|
||||
[[ -n "${_PRE_ADMIN_SUPER_EMAIL}" ]] && ADMIN_SUPER_EMAIL="${_PRE_ADMIN_SUPER_EMAIL}"
|
||||
[[ -n "${_PRE_ADMIN_SUPER_PASSWORD}" ]] && ADMIN_SUPER_PASSWORD="${_PRE_ADMIN_SUPER_PASSWORD}"
|
||||
[[ -n "${_PRE_ADMIN_EMAIL}" ]] && ADMIN_EMAIL="${_PRE_ADMIN_EMAIL}"
|
||||
[[ -n "${_PRE_ADMIN_PASSWORD}" ]] && ADMIN_PASSWORD="${_PRE_ADMIN_PASSWORD}"
|
||||
|
||||
ADMIN_LOGIN_EMAIL="${SMOKE_ADMIN_EMAIL:-${ADMIN_SUPER_EMAIL:-${ADMIN_EMAIL:-}}}"
|
||||
ADMIN_LOGIN_PASS="${SMOKE_ADMIN_PASSWORD:-${ADMIN_SUPER_PASSWORD:-${ADMIN_PASSWORD:-}}}"
|
||||
|
||||
if [[ -z "${ADMIN_LOGIN_EMAIL}" || -z "${ADMIN_LOGIN_PASS}" ]]; then
|
||||
if [[ "${ALLOW_FALLBACK_CREDS}" -eq 1 ]]; then
|
||||
ADMIN_LOGIN_EMAIL="${ADMIN_LOGIN_EMAIL:-superadmin@eventhub.local}"
|
||||
ADMIN_LOGIN_PASS="${ADMIN_LOGIN_PASS:-123456}"
|
||||
else
|
||||
echo "No admin credentials for STAND=${STAND}." >&2
|
||||
echo "Set ADMIN_* / SMOKE_ADMIN_* or provide ENV_FILE (tried: ${ENV_CANDIDATES[*]})." >&2
|
||||
exit 1
|
||||
fi
|
||||
fi
|
||||
|
||||
echo "stand=${STAND} admin_api=${ADMIN_API} env_file=${ENV_RESOLVED:-none}" >&2
|
||||
|
||||
LOGIN=$(curl -sk --connect-timeout 15 -X POST "${ADMIN_API}/v1/admin/login" \
|
||||
-H 'Content-Type: application/json' \
|
||||
-d "{\"email\":\"${ADMIN_LOGIN_EMAIL}\",\"password\":\"${ADMIN_LOGIN_PASS}\"}") || {
|
||||
echo "admin login request failed: ${ADMIN_API}/v1/admin/login" >&2
|
||||
exit 1
|
||||
}
|
||||
|
||||
ADMIN_TOKEN=$(printf '%s' "${LOGIN}" | python3 -c '
|
||||
import json,sys
|
||||
try:
|
||||
d=json.load(sys.stdin)
|
||||
except Exception as e:
|
||||
print("", end="")
|
||||
sys.exit(0)
|
||||
print(d.get("token") or d.get("access_token") or "", end="")
|
||||
') || true
|
||||
|
||||
if [[ -z "${ADMIN_TOKEN}" ]]; then
|
||||
echo "admin login failed: ${LOGIN}" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
ENC=$(python3 -c 'import urllib.parse,sys; print(urllib.parse.quote(sys.argv[1]))' "${TARGET_EMAIL}")
|
||||
USERS_JSON=$(curl -sk --connect-timeout 15 \
|
||||
"${ADMIN_API}/v1/admin/users?q=${ENC}&limit=50" \
|
||||
-H "Authorization: Bearer ${ADMIN_TOKEN}")
|
||||
|
||||
USER_ID=$(printf '%s' "${USERS_JSON}" | python3 -c '
|
||||
import json,sys
|
||||
raw=sys.stdin.read()
|
||||
try:
|
||||
items=json.loads(raw)
|
||||
except Exception:
|
||||
print("")
|
||||
raise SystemExit
|
||||
if isinstance(items, dict):
|
||||
items=items.get("users") or items.get("items") or items.get("data") or []
|
||||
target=sys.argv[1].lower()
|
||||
for u in items:
|
||||
if str(u.get("email","")).lower()==target:
|
||||
print(u.get("id") or "")
|
||||
raise SystemExit
|
||||
print("")
|
||||
' "${TARGET_EMAIL}")
|
||||
|
||||
if [[ -z "${USER_ID}" ]]; then
|
||||
echo "USER_NOT_FOUND=${TARGET_EMAIL}" >&2
|
||||
exit 2
|
||||
fi
|
||||
|
||||
VT=$(curl -sk --connect-timeout 15 \
|
||||
"${ADMIN_API}/v1/admin/users/${USER_ID}/verification-token" \
|
||||
-H "Authorization: Bearer ${ADMIN_TOKEN}")
|
||||
|
||||
TOKEN=$(printf '%s' "${VT}" | python3 -c '
|
||||
import json,sys
|
||||
try:
|
||||
d=json.load(sys.stdin)
|
||||
except Exception:
|
||||
print("")
|
||||
raise SystemExit
|
||||
print(d.get("token") or "", end="")
|
||||
')
|
||||
EXPIRES=$(printf '%s' "${VT}" | python3 -c '
|
||||
import json,sys
|
||||
try:
|
||||
d=json.load(sys.stdin)
|
||||
except Exception:
|
||||
print("")
|
||||
raise SystemExit
|
||||
print(d.get("expires_at") or "", end="")
|
||||
')
|
||||
|
||||
if [[ -z "${TOKEN}" ]]; then
|
||||
echo "verification-token failed for user_id=${USER_ID}: ${VT}" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
echo "user_id=${USER_ID} expires_at=${EXPIRES}" >&2
|
||||
printf '%s\n' "${TOKEN}"
|
||||
Reference in New Issue
Block a user