Method SudoIssueRuntimeManagerToken

admin/server/sudo.go:14–30

(ctx context.Context, req *adminv1.SudoIssueRuntimeManagerTokenRequest)

)

func (s *Server) SudoIssueRuntimeManagerToken(ctx context.Context, req *adminv1.SudoIssueRuntimeManagerTokenRequest) (*adminv1.SudoIssueRuntimeManagerTokenResponse, error) {
	observability.AddRequestAttributes(ctx, attribute.String("args.host", req.Host))

	claims := auth.GetClaims(ctx)
	if !claims.Superuser(ctx) {
		return nil, status.Error(codes.PermissionDenied, "only superusers can request a manager token")
	}

	jwt, err := s.admin.IssueRuntimeManagementToken(req.Host)
	if err != nil {
		return nil, err
	}

	return &adminv1.SudoIssueRuntimeManagerTokenResponse{
		Token: jwt,
	}, nil
}