团子
4c6271a21a
- CF Worker with shared/personal scope layering - Python CLI client (cfg) with sync/get/set/list/delete - Agent registration script - Auth via bearer token, sha256 hash lookup
44 lines
1.1 KiB
Python
44 lines
1.1 KiB
Python
#!/usr/bin/env python3
|
|
"""Register an agent token in the config service KV.
|
|
|
|
Usage: python3 register_agent.py <agent_id> <role> [token]
|
|
|
|
If token is omitted, a random one is generated.
|
|
Outputs the KV entry to add via wrangler CLI.
|
|
"""
|
|
|
|
import hashlib
|
|
import json
|
|
import secrets
|
|
import sys
|
|
|
|
|
|
def main():
|
|
if len(sys.argv) < 3:
|
|
print(f"Usage: {sys.argv[0]} <agent_id> <role> [token]")
|
|
print(" role: agent or admin")
|
|
sys.exit(1)
|
|
|
|
agent_id = sys.argv[1]
|
|
role = sys.argv[2]
|
|
token = sys.argv[3] if len(sys.argv) > 3 else secrets.token_urlsafe(32)
|
|
|
|
if role not in ("agent", "admin"):
|
|
print("Role must be 'agent' or 'admin'", file=sys.stderr)
|
|
sys.exit(1)
|
|
|
|
token_hash = hashlib.sha256(token.encode()).hexdigest()
|
|
entry = json.dumps({"agent_id": agent_id, "role": role})
|
|
|
|
print(f"Agent ID: {agent_id}")
|
|
print(f"Role: {role}")
|
|
print(f"Token: {token}")
|
|
print(f"Token hash: {token_hash}")
|
|
print()
|
|
print("Add to KV:")
|
|
print(f' wrangler kv key put --binding CONFIG_KV "auth:{token_hash}" \'{entry}\'')
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main()
|