Method IssueServiceAuthToken

admin/server/service.go:481–510

IssueServiceAuthToken issues a new auth token for a service account.

(ctx context.Context, req *adminv1.IssueServiceAuthTokenRequest)

// IssueServiceAuthToken issues a new auth token for a service account.
func (s *Server) IssueServiceAuthToken(ctx context.Context, req *adminv1.IssueServiceAuthTokenRequest) (*adminv1.IssueServiceAuthTokenResponse, error) {
	observability.AddRequestAttributes(ctx,
		attribute.String("args.service_name", req.ServiceName),
		attribute.String("args.organization_name", req.Org),
	)

	org, err := s.admin.DB.FindOrganizationByName(ctx, req.Org)
	if err != nil {
		return nil, err
	}

	service, err := s.admin.DB.FindServiceByName(ctx, org.ID, req.ServiceName)
	if err != nil {
		return nil, err
	}

	claims := auth.GetClaims(ctx)
	if !claims.OrganizationPermissions(ctx, org.ID).ManageOrg {
		return nil, status.Error(codes.PermissionDenied, "not allowed to update org")
	}

	token, err := s.admin.IssueServiceAuthToken(ctx, service.ID, nil)
	if err != nil {
		return nil, err
	}

	return &adminv1.IssueServiceAuthTokenResponse{
		Token: token.Token().String(),
	}, nil
}

// RevokServiceAuthToken revokes an auth token for a service account.
func (s *Server) RevokeServiceAuthToken(ctx context.Context, req *adminv1.RevokeServiceAuthTokenRequest) (*adminv1.RevokeServiceAuthTokenResponse, error) {