Function runClientCredentialsFlow

internal/cli/utils_shared.go:64–97

runClientCredentialsFlow runs an M2M client credentials flow without opening a browser.

(
	ctx context.Context,
	cli *cli,
	client *management.Client,
	audience string,
	tenantDomain string,
	organization string,
)

// runClientCredentialsFlow runs an M2M client
// credentials flow without opening a browser.
func runClientCredentialsFlow(
	ctx context.Context,
	cli *cli,
	client *management.Client,
	audience string,
	tenantDomain string,
	organization string,
) (*authutil.TokenResponse, error) {
	if err := checkClientIsAuthorizedForAPI(ctx, cli, client, audience, organization); err != nil {
		return nil, err
	}

	tokenURL := BuildOauthTokenURL(tenantDomain)
	payload := BuildOauthTokenParams(client.GetClientID(), client.GetClientSecret(), audience, organization)

	var tokenResponse *authutil.TokenResponse
	err := ansi.Spinner("Waiting for token", func() error {
		response, err := http.PostForm(tokenURL, payload)
		if err != nil {
			return err
		}
		defer func() {
			_ = response.Body.Close()
		}()

		if err = json.NewDecoder(response.Body).Decode(&tokenResponse); err != nil {
			return fmt.Errorf("failed to decode the response: %w", err)
		}

		return nil
	})

	return tokenResponse, err
}

func checkClientIsAuthorizedForAPI(ctx context.Context, cli *cli, client *management.Client, audience, organization string) error {
	var list *management.ClientGrantList