auth:login
Bootstrap API key auth through RFC 8628 device authorization flow.
Reference for flywheel auth:login.
Command Group
Auth Commands
Summary
Bootstrap API key auth through RFC 8628 device authorization flow.
Effect
DESTRUCTIVE: deletes, overwrites or revokes something
Usage
flywheel auth:login [FLAGS]Aliases
al
Required flags
None.
Optional flags
| Flag | Value | Default | Choices | Description |
|---|---|---|---|---|
--name | string | Human-readable label for the new key. | ||
--expiry_days | integer | Key lifetime in days (server default applies when omitted). | ||
--no-browser | Print the verification URL instead of auto-opening the browser. | |||
--format | FORMAT | json, tsv, csv, table | Output format for command results. | |
--env | PROFILE | Select a CLI profile; unconfigured default requires FLYWHEEL_BASE_URL. | ||
--out | PATH | Write output to a file path, or use - for stdout. | ||
--open | Open browser-bound URLs when supported. | |||
--no-retry | Disable transient-error retries. | |||
--retry-max | N | Maximum transient-error retry attempts. | ||
--wait | Block on async operations until a terminal state is reached. | |||
--wait-timeout | SECONDS | 600 | Seconds to wait for --wait before timing out. Defaults to 600. | |
--allow-self | Allow mutating the currently active credential. | |||
--timeout | SECONDS | Set the per-request timeout budget in seconds. | ||
--idempotency-key | KEY | Reuse an Idempotency-Key so ambiguous write failures can be retried with the same key. | ||
--force | Force safety-gated operations where supported. | |||
--yes | Confirm forced compute:release-all --force. Other runtime commands do not read --yes. | |||
--debug | Print structured request debugging with secrets masked. | |||
--verbose | Print verbose progress for long-running operations. | |||
-h, --help | Show this help. |
Examples
Interactive login against the active profile.
flywheel auth:loginHeadless login (prints the verification URL instead of opening the browser).
flywheel auth:login --no-browserauth:credentials:set
Store an API key in the local credential file for a profile. Reads the key from stdin.
auth:status
Report who the current access token signs you in as: authenticated, user_id and email (null when not signed in), auth_enabled (whether sign-in is required) and session_capacity (mode, gate_closed, reason, authenticated_session_admitted, public_surface_mode, web_heartbeat_seconds). Session capacity concerns signed-in web sessions, not compute approval sessions.