fix: login command

Author: boyander

.mcp.json

@@ -0,0 +1,13 @@
+{
+  "mcpServers": {
+    "playwright": {
+      "type": "stdio",
+      "command": "npx",
+      "args": [
+        "-y",
+        "@playwright/mcp@latest"
+      ],
+      "env": {}
+    }
+  }
+}

src/api/auth.ts

@@ -28,3 +28,13 @@ export async function getDeviceToken(device_code: string) {
   }>(`/oauth/token`, { device_code, client_id:CLIENT_ID, grant_type:"urn:ietf:params:oauth:grant-type:device_code" });
   return res.data;
 }
+
+// Validate a device-flow access token against the Faable Auth server. The token
+// is issued by the auth server, so it must be introspected there — NOT against
+// the deploy API (api.faable.com), which has no /me route and would 404.
+export async function getMe(access_token: string) {
+  const res = await api.get<{ email: string; id: string }>(`/me`, {
+    headers: { Authorization: `Bearer ${access_token}` },
+  });
+  return res.data;
+}

src/commands/login/index.ts

@@ -1,8 +1,7 @@
 import { CommandModule } from "yargs";
 import { FaableApi } from "../../api/FaableApi";
-import { getDeviceCode, getDeviceToken } from "../../api/auth";
+import { getDeviceCode, getDeviceToken, getMe } from "../../api/auth";
 import { CredentialsStore } from "../../lib/CredentialsStore";
-import { bearer_strategy } from "../../api/strategies/bearer.strategy";
 import open from "open";
 import ora from "ora";
 import { log } from "../../log";
@@ -139,11 +138,9 @@ export const login: CommandModule = {
           const { access_token } = await getDeviceToken(device_code);
           if (access_token) {
             spinner.stop();
-            const tempApi = FaableApi.create({
-              auth: { token: access_token },
-              authStrategy: bearer_strategy,
-            });
-            const me = await tempApi.getMe();
+            // Validate the freshly issued token against the Auth server (it
+            // issued the token). The deploy API has no /me route.
+            const me = await getMe(access_token);
             await store.saveCredentials({ token: access_token, email: me.email });
             log.info(`✅ Successfully logged in as ${me.email}`);
             return;