mise 2026.9.4

Dev tools, env vars, and tasks in one CLI
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99

use crate::github;
use crate::tokens;
use eyre::bail;

/// Display the GitHub token mise will use for a given host
///
/// Shows which token source mise would use, useful for debugging
/// authentication issues. The token is masked by default.
#[derive(Debug, usage_rs::Args)]
#[usage(
    verbatim_doc_comment,
    example(
        r###"mise token github
github.com: ghp_…xxxx (source: GITHUB_TOKEN)"###
    ),
    example(
        r###"mise token github --unmask
github.com: ghp_xxxxxxxxxxxx (source: GITHUB_TOKEN)"###
    ),
    example(
        r###"mise token github github.mycompany.com
github.mycompany.com: (none)"###
    ),
    example(
        r###"mise token github --oauth --refresh
github.com: gho_…xxxx (source: GitHub OAuth)"###
    )
)]
pub(crate) struct Github {
    /// GitHub hostname
    #[usage(default = "github.com")]
    pub(crate) host: String,

    /// Speak Git's credential helper protocol
    #[usage(long, hide = true)]
    pub(crate) git_credential: Option<String>,

    /// Resolve only via the native GitHub OAuth source (cache,
    /// refresh, or device-code flow), bypassing other token sources
    #[usage(long)]
    pub(crate) oauth: bool,

    /// Print only the token value
    #[usage(long)]
    pub(crate) raw: bool,

    /// Mint a fresh OAuth token even if the cached one has not
    /// expired, via the refresh-token grant or a new device-code flow.
    /// Use after changing the GitHub App's installations or permissions:
    /// cached tokens keep their original access until they expire
    #[usage(long, requires = "oauth")]
    pub(crate) refresh: bool,

    /// Show the full unmasked token
    #[usage(long)]
    pub(crate) unmask: bool,
}

impl Github {
    pub(crate) fn run(self) -> eyre::Result<()> {
        if let Some(operation) = &self.git_credential {
            return super::git_credential::run(operation);
        }
        let resolved = if self.oauth {
            Some((
                github::oauth::token(github::oauth::TokenRequest {
                    host: self.host.clone(),
                    allow_device_flow: true,
                    force_refresh: self.refresh,
                    ..Default::default()
                })?,
                github::TokenSource::GithubOauth,
            ))
        } else {
            github::resolve_token(&self.host)
        };
        match resolved {
            Some((token, source)) => {
                if self.raw {
                    miseprintln!("{token}");
                    return Ok(());
                }
                let display_token = if self.unmask {
                    token
                } else {
                    tokens::mask_token(&token)
                };
                miseprintln!("{}: {} (source: {})", self.host, display_token, source);
            }
            None => {
                if self.raw {
                    bail!("no GitHub token found for {}", self.host);
                }
                miseprintln!("{}: (none)", self.host);
            }
        }
        Ok(())
    }
}