verify-fluid-telegram-lane: clear message when the member login is refused
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 327203@bnt-lap001 Assistant-Session: 55028ae3-4914-4bd1-8f5c-815f3527aef0
This commit is contained in:
parent
b1f6a3dab1
commit
777f8df707
1 changed files with 8 additions and 2 deletions
|
|
@ -21,11 +21,17 @@ case "$mode" in member|non-member) ;; *) echo "usage: $0 member|non-member" >&2;
|
|||
umask 077
|
||||
mkdir -p "$RECEIPTS"
|
||||
receipt="$RECEIPTS/fluid-telegram-lane-$mode.txt"
|
||||
echo "Sign in as the $mode identity in your browser (URL below)." >&2
|
||||
echo "Sign in as the $mode identity in your browser (URL below). Use a private window so" >&2
|
||||
echo "an existing KeyCape session (e.g. platform-root) is not reused." >&2
|
||||
|
||||
if ! token="$(bao login -token-only -method=oidc -path=netkingdom role="$ROLE")" || [ -z "$token" ]; then
|
||||
{ echo "mode=$mode at=$(date -u +%FT%TZ)"; echo "login=refused"; } > "$receipt"
|
||||
echo "login refused (expected for non-member); receipt: $receipt" >&2
|
||||
if [ "$mode" = non-member ]; then
|
||||
echo "login refused, as expected for a non-member; receipt: $receipt" >&2
|
||||
else
|
||||
echo "login REFUSED for the member run. If the browser reused another KeyCape session" >&2
|
||||
echo "(e.g. platform-root), retry in a private window signed in as a group member." >&2
|
||||
fi
|
||||
[ "$mode" = non-member ] && exit 0 || exit 1
|
||||
fi
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue