From b98a19cc4f67e0ba3c70815a745351805db2ec90 Mon Sep 17 00:00:00 2001 From: Erick Shaffer Date: Sat, 20 Jun 2026 13:48:04 -0600 Subject: [PATCH 1/2] refactor: remove Password field from Costco config, use local costco-go Updated to use the refactored costco-go that removed password grant auth. Added local replace directive to use development version of costco-go. Users must now use token import from browser with: costco-cli -cmd import-token --- go.mod | 2 ++ token.json | 9 +++++++++ 2 files changed, 11 insertions(+) create mode 100644 token.json diff --git a/go.mod b/go.mod index e70eb90..1263853 100644 --- a/go.mod +++ b/go.mod @@ -13,6 +13,8 @@ require ( gopkg.in/yaml.v3 v3.0.1 ) +replace github.com/eshaffer321/costco-go => /Users/erickshaffer/code/costco-go + require ( github.com/davecgh/go-spew v1.1.1 // indirect github.com/getsentry/sentry-go v0.36.0 // indirect diff --git a/token.json b/token.json new file mode 100644 index 0000000..340a7d0 --- /dev/null +++ b/token.json @@ -0,0 +1,9 @@ +{ + "id_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6IlhrZTFoNXg5TV9ZMk5ER0YxU1hDX2xNNnVSTU5tZTJ3STBLRDlHNzl1QmciLCJ0eXAiOiJKV1QifQ.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.cWMJjohRXFrbF8rXh6NAoWdggOD3LtsnSha88iheGT_VvakcTn7QTZ1LmXgUTh6VGo0vtNDTYodf75e9vp3C3yqJXUJIMKXgymV8uqH8QmLwhJByOzuaOsdy1XAnaWLpLL1b2t9tFPGLbx7gwo-LYvZwsQ3B6yxcXsGnBheWv8bS1FPeSz-kQ9Jc5PDu7dIsxdSDNWA6MtwBQs1cbuq5iz-pR9CyeYQsknf0OrRTNzX7tGDmIaDzd712rwA6nSmzyh6sFQpAvegsetl6_oLzDvFcRLG_YCjjbMZWyFL_nUcJZLkbl5a_pDi1PIVlk5sKApQiWKOzBmuLH-pP6O-Y1Q", + "token_type": "Bearer", + "not_before": 1781984539, + "client_info": "eyJ1aWQiOiIyODFiZDBiYS0yZDEyLTRhNjEtYThhYi01MWQ2NTMyN2Q3OWQtYjJjXzFhX3Nzb193Y3Nfc2lnbnVwX3NpZ25pbl8yMDkiLCJ1dGlkIjoiZTA3MTRkZDQtNzg0ZC00NmQ2LWEyNzgtM2UyOTU1MzQ4M2ViIn0", + "scope": "", + "refresh_token": "eyJraWQiOiJsVXhjaVp5NTg0VnF0S3NuNllDUWstVUpaU2s3X3R2bVh4ck96dkl6RnZjIiwidmVyIjoiMS4wIiwiemlwIjoiRGVmbGF0ZSIsInNlciI6IjEuMCJ9.HdypJyLgrJl_8gW9AM4Y9MSskAEODnflmOXCT1bpFNG8-IGCeovuvD2FqABTz0b1OY1xk_q7kwKvkcPVFtXwlWfymCOONM6IHBTbQDSHFR2Z2nQRHJn_CoYEjkZqm1cu7UeJ842M0oO7mRGbJqxnV9JX_iqtz10DZ0I1i_-8jDB2_JLTsJvNMIg-4DHOZJlqtM3i_jGeTxoCKAdRUeI9r8zkxDET6jptIkJqrFGyDSibzXkNmpT5wc9xyREPA_fa8z-xZI6EqcXly0RVw1_hjm-0aY_D-NZ3uFKOt_f1sIk3ljxo6k6AQbHqO4XJix3ViZJUXKrQslyIY6Z3dz5zGQ.79chaRhuy3J4u2RB.CHuXOXPijiONHZReTqgbFaa4CMP4pvpUgo-V5PFDa_IZgJbmI6fQpMMvBPfqldbQYIQkASB-bbrSddViPzp-OBpcsRxpGjeaPry1R0czNf4nX7h4sTdp9dMg7kjhZ9umSwIA4JFwc2N2fUesE8jJK06GYDnniCDPLkOnQh-zJwTfdRBL0_2POizZtV5PJTBU3qnY-12J34nfboeaPC_W9S9XsUrPFYU6LpUe10FgZk9-kbePF37AL7RRKT4-T9IYll6CthJa5T6oAnm3t3H4wGy6zU9yFKhw7_8lnylhnzMDeuabqqLnh1OTzd9w7S2kLwijvPZFYak7vryiCnKERKw25b64m2_0wMXABcCNPSyAyfnLPEJ-qoFCbj7sA_FNyR31acnUWORNPS8rTK3d2vR1yZYRmPt2CG-9YZ48DCBBO-0B5RNyl9Yx9ShNla84frRiwees0CtlIhDKUo9qIt6MBqNT-eDBwCejNQ39avik0xfucivOK-bhJ6RQdHSac7u072ipQRZqVyEsD9tH1dSo1CTguLODPklKivWW1EN46OIKJYbHbKI_hD7hy6jTXfghgt0-I3hj0f2YcLbhx0ydXDkLFbUmVvr3YOX9nSqz86vQ-ip-2GUxQArn3kzfejkP18k0H6oeSfw01buieG2JY0jlYS-IPz8JKz2Qk_0a1u7Uo2jgAzz38s4TEEcqVCeyMId3S5zRPzFy-AT_bOxvSWKkkPe9k6t4LGz0a3U7YTXd12wdxB_fkqY0nn-2YATn0LXt8Zz-YMOfOlyVGT6CyfK6WpUg8Sp_rNoIzZ1sRJByiPQb7VYt5g5VtfJe2urTKROfksoMl3rpmNPkFREnfWw0KPyacSCLXvcsb9NHt_LRWiAY8XUWm29ZplgZUAeMAuYDGn-E3s17s5zM1UTL3zi1wUYq__KNolXidk70SfLlMSvO1wjk8R8kYQOcYac7XrGPGcrmBnSvSiqIc9GV.F7hLmHlmZldA9m4XR_ROwQ", + "refresh_token_expires_in": 7776000 +} From 196d45fc8a8fea12a14388fe45599411802f3ffd Mon Sep 17 00:00:00 2001 From: Erick Shaffer Date: Sun, 21 Jun 2026 20:07:40 -0600 Subject: [PATCH 2/2] chore: bump costco-go to v0.3.11 --- go.mod | 4 +--- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 5 deletions(-) diff --git a/go.mod b/go.mod index 1263853..467af06 100644 --- a/go.mod +++ b/go.mod @@ -3,7 +3,7 @@ module github.com/eshaffer321/monarchmoney-sync-backend go 1.25.11 require ( - github.com/eshaffer321/costco-go v0.3.10 + github.com/eshaffer321/costco-go v0.3.11 github.com/eshaffer321/monarchmoney-go v1.0.5 github.com/eshaffer321/walmart-client-go/v2 v2.0.1 github.com/go-chi/chi/v5 v5.2.5 @@ -13,8 +13,6 @@ require ( gopkg.in/yaml.v3 v3.0.1 ) -replace github.com/eshaffer321/costco-go => /Users/erickshaffer/code/costco-go - require ( github.com/davecgh/go-spew v1.1.1 // indirect github.com/getsentry/sentry-go v0.36.0 // indirect diff --git a/go.sum b/go.sum index c05c435..fdff4f3 100644 --- a/go.sum +++ b/go.sum @@ -2,8 +2,8 @@ github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY= github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto= -github.com/eshaffer321/costco-go v0.3.10 h1:Lp8ZUEuLQC3ciGHWWjiPxMOez+hJe9YZ2JmlHxeC/HI= -github.com/eshaffer321/costco-go v0.3.10/go.mod h1:ANJTHfRSPyot9cWKNlfs5qDKRKkA4tYORrorvWx/vbM= +github.com/eshaffer321/costco-go v0.3.11 h1:vOEXcSj/vGlwE/4AbXK3uUdXG7XYg1qfUPViujJRS7Q= +github.com/eshaffer321/costco-go v0.3.11/go.mod h1:ANJTHfRSPyot9cWKNlfs5qDKRKkA4tYORrorvWx/vbM= github.com/eshaffer321/monarchmoney-go v1.0.5 h1:V3iP0bvB1q3+m9Gkl6KBCFL44sNsiHDbTxSOU9fHZco= github.com/eshaffer321/monarchmoney-go v1.0.5/go.mod h1:ZKPCYT7NcsKGI+YpJ2EqPtfE3dKfuPbiTUrj6J84ot4= github.com/eshaffer321/walmart-client-go/v2 v2.0.1 h1:R8NFqKqfdri02Jhmr6jOMpCLAzjdiRbStLtjGKo6WaA=