Function loginWithOpenIdConnect

pkg/cmd/login/login.go:206–259

(configProvider config.IConfigProvider, httpClient *http.Client, server string, serviceAccountId string, idToken string, cmd *cobra.Command)

}

func loginWithOpenIdConnect(configProvider config.IConfigProvider, httpClient *http.Client, server string, serviceAccountId string, idToken string, cmd *cobra.Command) error {
	serverLink := output.Cyan(server)
	serviceAccountOutput := output.Cyan(serviceAccountId)

	cmd.Printf("Logging in with OpenID Connect to %s using service account %s", serverLink, serviceAccountOutput)
	cmd.Println()

	openIdConfiguration, err := getOpenIdConfiguration(httpClient, server)
	if err != nil {
		return err
	}

	tokenExchangeResponse, err := performTokenExchange(httpClient, serviceAccountId, idToken, openIdConfiguration)

	if err != nil {
		return err
	}

	expiresIn, err := time.ParseDuration(fmt.Sprintf("%ds", tokenExchangeResponse.ExpiresIn))

	if err != nil {
		return err
	}

	expiryTime := time.Now().Add(expiresIn)

	accessTokenCredentials, err := octopusApiClient.NewAccessToken(tokenExchangeResponse.AccessToken)

	if err != nil {
		return err
	}

	// No time.DateTime in go 1.19, when we have upgraded to 1.20+ we can change
	cmd.Printf("Access token obtained successfully via OpenID Connect, valid until %s", output.Cyan(expiryTime.Format("2006-01-02 15:04:05")))
	cmd.Println()

	err = testLogin(cmd, httpClient, server, accessTokenCredentials)

	if err != nil {
		cmd.Println(err)
		return errors.New("login unsuccessful using access token obtained via OpenID Connect")
	}

	cmd.Printf("Configuring CLI to use access token for Octopus Server: %s", serverLink)
	cmd.Println()

	configProvider.Set(constants.ConfigUrl, server)
	configProvider.Set(constants.ConfigAccessToken, tokenExchangeResponse.AccessToken)
	configProvider.Set(constants.ConfigApiKey, "")

	cmd.Printf("Login successful, happy deployments!")
	cmd.Println()
	return nil
}

func performTokenExchange(httpClient *http.Client, serviceAccountId string, idToken string, openIdConfiguration *OpenIdConfigurationResponse) (*TokenExchangeResponse, error) {
	tokenExchangeData := TokenExchangeRequest{