feat(examples): add bash-cli example using device code flow by appleboy · Pull Request #3 · go-authgate/examples

appleboy · 2026-03-26T15:06:50Z

Summary

Add a pure bash CLI example implementing OAuth 2.0 Device Authorization Grant (RFC 8628)
Only requires curl and jq — no SDK or runtime needed
Supports OIDC auto-discovery, token caching, refresh token rotation, and re-authentication on invalid tokens
Handles cross-platform date conversion (macOS + Linux)

Test plan

Run without jq installed → dependency error
Run without env vars → usage error
Run with unreachable server → clear connection error
Run full device code flow → authenticate and print token info
Run again → uses cached token without re-authentication
Compare output format with go-cli output

🤖 Generated with Claude Code

- Implement OAuth 2.0 Device Authorization Grant (RFC 8628) in pure bash - Support OIDC auto-discovery, token caching, and refresh token rotation - Handle cross-platform date conversion for macOS and Linux - Add bash-cli section to examples README

- Pass POST data and auth headers via stdin to prevent token leaks in process list - URL-encode all form data values for correctness - Use mktemp for unpredictable temp file paths - Fix cache file permissions on load - Consolidate multi-jq calls into single invocations per function - Use bash parameter expansion in _parse_response hot path - Extract run_device_flow to eliminate duplicated prompt block - Remove redundant fetch_userinfo call from print_token_info - Detect platform date flavor once at startup

Copilot

Pull request overview

Adds a new bash-based CLI example demonstrating AuthGate authentication via OAuth 2.0 Device Authorization Grant (RFC 8628), complementing the existing Go/Python examples and enabling a “no SDK” flow using only common CLI tools.

Changes:

Introduces bash-cli/main.sh, a pure Bash implementation of the device code flow with OIDC discovery, token caching, refresh, and re-auth on invalid tokens.
Updates the root README.md to document how to run the new Bash CLI example.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 10 comments.

File	Description
bash-cli/main.sh	New Bash device-code CLI with discovery, polling, refresh, cache read/write, and token/userinfo/tokeninfo output
README.md	Adds a brief section documenting the new Bash CLI example

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

bash-cli/main.sh

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 5 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

bash-cli/main.sh

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 6 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

bash-cli/main.sh

…nt field shifting

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

bash-cli/main.sh

… non-fatal

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

bash-cli/main.sh

README.md

… refresh

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 4 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

bash-cli/main.sh

README.md

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 13 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

bash-cli/main.sh

…detection, non-fatal cache ops

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

bash-cli/main.sh

…ia --

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

bash-cli/main.sh

…re-auth on 401/403

Copilot

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot AI review requested due to automatic review settings March 26, 2026 15:06

Copilot started reviewing on behalf of appleboy March 26, 2026 15:07 View session

Copilot AI reviewed Mar 26, 2026

View reviewed changes

fix(bash-cli): harden error handling for Copilot review comments

01d0f45

appleboy requested review from Copilot and removed request for Copilot March 27, 2026 04:36

Copilot started reviewing on behalf of appleboy March 27, 2026 05:10 View session

Copilot started reviewing on behalf of appleboy March 27, 2026 05:14 View session

Copilot AI reviewed Mar 27, 2026

View reviewed changes

bash-cli/main.sh Show resolved Hide resolved

bash-cli/main.sh Show resolved Hide resolved

bash-cli/main.sh Show resolved Hide resolved

bash-cli/main.sh Show resolved Hide resolved

bash-cli/main.sh Outdated Show resolved Hide resolved

fix(bash-cli): address remaining Copilot review comments

9b06b3d

appleboy requested a review from Copilot March 27, 2026 05:24

Copilot started reviewing on behalf of appleboy March 27, 2026 05:25 View session

appleboy requested review from Copilot and removed request for Copilot March 27, 2026 05:28

Copilot started reviewing on behalf of appleboy March 27, 2026 05:28 View session

Copilot AI reviewed Mar 27, 2026

View reviewed changes

fix(bash-cli): replace // empty with // "" in jq array joins to preve…

afceb52

…nt field shifting

appleboy requested a review from Copilot March 27, 2026 05:31

Copilot started reviewing on behalf of appleboy March 27, 2026 05:32 View session

Copilot AI reviewed Mar 27, 2026

View reviewed changes

bash-cli/main.sh Show resolved Hide resolved

bash-cli/main.sh Show resolved Hide resolved

fix(bash-cli): make jq failures in fetch_userinfo and fetch_tokeninfo…

2da964c

… non-fatal

appleboy requested a review from Copilot March 27, 2026 05:35

Copilot started reviewing on behalf of appleboy March 27, 2026 05:36 View session

Copilot AI reviewed Mar 27, 2026

View reviewed changes

bash-cli/main.sh Outdated Show resolved Hide resolved

bash-cli/main.sh Show resolved Hide resolved

README.md Show resolved Hide resolved

appleboy added 2 commits March 27, 2026 13:42

fix(bash-cli): escape curl config headers, preserve scope/id_token on…

c12128f

… refresh

docs: update README intro to reflect multi-language examples

8d66294

appleboy requested a review from Copilot March 27, 2026 05:42

Copilot started reviewing on behalf of appleboy March 27, 2026 05:52 View session

appleboy requested review from Copilot and removed request for Copilot March 27, 2026 05:54

Copilot started reviewing on behalf of appleboy March 27, 2026 05:54 View session

Copilot AI reviewed Mar 27, 2026

View reviewed changes

bash-cli/main.sh Outdated Show resolved Hide resolved

README.md Outdated Show resolved Hide resolved

README.md Outdated Show resolved Hide resolved

README.md Outdated Show resolved Hide resolved

appleboy added 2 commits March 27, 2026 13:57

docs: fix Python example commands and token cache description

a676d66

fix(bash-cli): guard chmod/mv in delete_cached_token

ccfa34d

appleboy requested a review from Copilot March 27, 2026 05:58

Copilot started reviewing on behalf of appleboy March 27, 2026 05:59 View session

appleboy requested review from Copilot and removed request for Copilot March 27, 2026 06:00

Copilot started reviewing on behalf of appleboy March 27, 2026 06:00 View session

Copilot AI reviewed Mar 27, 2026

View reviewed changes

fix(bash-cli): printf for untrusted data, curl timeouts, DATE_FLAVOR …

fb0e91e

…detection, non-fatal cache ops

appleboy requested a review from Copilot March 27, 2026 06:13

Copilot started reviewing on behalf of appleboy March 27, 2026 06:13 View session

appleboy requested review from Copilot and removed request for Copilot March 27, 2026 06:15

Copilot started reviewing on behalf of appleboy March 27, 2026 06:16 View session

Copilot AI reviewed Mar 27, 2026

View reviewed changes

bash-cli/main.sh Show resolved Hide resolved

bash-cli/main.sh Outdated Show resolved Hide resolved

bash-cli/main.sh Outdated Show resolved Hide resolved

fix(bash-cli): symlink check for token cache, curl option injection v…

b3e8bb4

…ia --

appleboy requested a review from Copilot March 27, 2026 06:21

Copilot started reviewing on behalf of appleboy March 27, 2026 06:22 View session

Copilot AI reviewed Mar 27, 2026

View reviewed changes

bash-cli/main.sh Show resolved Hide resolved

bash-cli/main.sh Show resolved Hide resolved

bash-cli/main.sh Outdated Show resolved Hide resolved

fix(bash-cli): symlink/ownership guards for write/delete cache; only …

da034df

…re-auth on 401/403

appleboy requested a review from Copilot March 27, 2026 06:31

Copilot started reviewing on behalf of appleboy March 27, 2026 06:32 View session

Copilot AI reviewed Mar 27, 2026

View reviewed changes

appleboy merged commit 2edd837 into main Mar 27, 2026
4 checks passed

appleboy deleted the feat/bash-cli branch March 27, 2026 09:28

Conversation

appleboy commented Mar 26, 2026

Summary

Test plan

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!