Set token via qlty auth login --token <TOKEN>

qlty-cli/src/commands/auth/login.rs

@@ -1,13 +1,42 @@
 use crate::{Arguments, CommandError, CommandSuccess};
-use anyhow::Result;
+use anyhow::{Context, Result};
 use clap::Args;
-use qlty_cloud::load_or_retrieve_auth_token;
+use console::style;
+use dialoguer::Input;
+use qlty_cloud::{load_or_retrieve_auth_token, store_auth_token};
 
 #[derive(Args, Debug)]
-pub struct Login {}
+pub struct Login {
+    /// Provide a CLI token manually or use "-" to read from standard input (see https://qlty.sh/user/settings/cli)
+    #[arg(long)]
+    pub token: Option<String>,
+}
 
 impl Login {
     pub fn execute(&self, _args: &Arguments) -> Result<CommandSuccess, CommandError> {
+        if let Some(mut token) = self.token.clone() {
+            if token == "" || token == "-" {
+                eprintln!(
+                    "Generate a token from {} and paste it here.",
+                    style("https://qlty.sh/user/settings/cli")
+                        .underlined()
+                        .green()
+                );
+                token = Input::<String>::new()
+                    .with_prompt("Token")
+                    .interact_text()
+                    .map(|line| line.trim().to_string())
+                    .with_context(|| "Invalid input")?;
+            }
+
+            if !token.starts_with("qltyp_") || token.len() < 32 {
+                return Err(CommandError::new("Token is invalid"));
+            }
+
+            store_auth_token(&token)?;
+            eprintln!("{}", style("Token saved successfully.").green());
+            return CommandSuccess::ok();
+        }
         load_or_retrieve_auth_token()?;
         CommandSuccess::ok()
     }

qlty-cloud/src/auth/mod.rs

@@ -5,11 +5,22 @@ use crate::Client;
 use anyhow::Result;
 use auth_flow::{launch_login_server, AppState};
 use console::style;
-use credentials::{delete_token, read_token};
-use std::{thread, time::Duration};
+use credentials::read_token;
+pub use credentials::{delete_token as clear_auth_token, write_token as store_auth_token};
+use std::{env, thread, time::Duration};
 use tracing::{info, warn};
 
+const TOKEN_ENV_VAR: &str = "QLTY_TOKEN";
+
 pub fn load_or_retrieve_auth_token() -> Result<String> {
+    if let Ok(token) = env::var(TOKEN_ENV_VAR) {
+        let token = token.trim().to_string();
+        if !token.is_empty() {
+            // bypass validation when env var is set since this is an intentional override of credential lookup
+            return Ok(token);
+        }
+    }
+
     let mut has_token = false;
     let auth_token = match read_token() {
         Ok(token) => {
@@ -32,10 +43,6 @@ pub fn load_or_retrieve_auth_token() -> Result<String> {
     }
 }
 
-pub fn clear_auth_token() -> Result<()> {
-    delete_token()
-}
-
 fn validate_auth_token(auth_token: &String) -> Result<()> {
     Client::new(None, Some(auth_token.into()))
         .get("/user")

qlty-cloud/src/lib.rs

@@ -3,7 +3,7 @@ pub mod export;
 pub mod format;
 
 use anyhow::Result;
-pub use auth::{clear_auth_token, load_or_retrieve_auth_token};
+pub use auth::{clear_auth_token, load_or_retrieve_auth_token, store_auth_token};
 use qlty_config::version::QLTY_VERSION;
 use ureq::Request;