feat: validate access token

cmd/cmdtest.go

@@ -10,6 +10,8 @@ import (
 	"github.com/stretchr/testify/require"
 
 	"github.com/launchdarkly/ldcli/internal/analytics"
+	"github.com/launchdarkly/ldcli/internal/config"
+	"github.com/launchdarkly/ldcli/internal/resources"
 )
 
 var StubbedSuccessResponse = `{
@@ -24,6 +26,7 @@ func CallCmd(
 	args []string,
 ) ([]byte, error) {
 	rootCmd, err := NewRootCommand(
+		config.NewService(&resources.MockClient{}),
 		trackerFn,
 		clients,
 		"test",

cmd/config/config.go

@@ -7,6 +7,7 @@ import (
 	"sort"
 	"strings"
 
+	errs "github.com/pkg/errors"
 	"github.com/spf13/cobra"
 	"github.com/spf13/viper"
 	"gopkg.in/yaml.v3"
@@ -38,10 +39,10 @@ func (cmd ConfigCmd) HelpCalled() bool {
 	return cmd.helpCalled
 }
 
-func NewConfigCmd(analyticsTrackerFn analytics.TrackerFn) *ConfigCmd {
+func NewConfigCmd(service config.Service, analyticsTrackerFn analytics.TrackerFn) *ConfigCmd {
 	cmd := &cobra.Command{
 		Long:  "View and modify specific configuration values",
-		RunE:  run(),
+		RunE:  run(service),
 		Short: "View and modify specific configuration values",
 		Use:   "config",
 		PreRun: func(cmd *cobra.Command, args []string) {
@@ -93,7 +94,7 @@ func NewConfigCmd(analyticsTrackerFn analytics.TrackerFn) *ConfigCmd {
 	return &configCmd
 }
 
-func run() func(*cobra.Command, []string) error {
+func run(service config.Service) func(*cobra.Command, []string) error {
 	return func(cmd *cobra.Command, args []string) error {
 		switch {
 		case viper.GetBool(ListFlag):
@@ -146,6 +147,25 @@ func run() func(*cobra.Command, []string) error {
 				}
 			}
 
+			var updatingAccessToken bool
+			for _, f := range newFields {
+				if f == cliflags.AccessTokenFlag {
+					updatingAccessToken = true
+					break
+				}
+			}
+			if updatingAccessToken {
+				if !service.VerifyAccessToken(
+					rawConfig[cliflags.AccessTokenFlag].(string),
+					viper.GetString(cliflags.BaseURIFlag),
+				) {
+					errorMessage := fmt.Sprintf("%s is invalid. ", cliflags.AccessTokenFlag)
+					errorMessage += errors.AccessTokenInvalidErrMessage(viper.GetString(cliflags.BaseURIFlag))
+					err := errs.New(errorMessage)
+					return errors.NewError(output.CmdOutputError(viper.GetString(cliflags.OutputFlag), err))
+				}
+			}
+
 			configFile, err := config.NewConfig(rawConfig)
 			if err != nil {
 				return errors.NewError(output.CmdOutputError(viper.GetString(cliflags.OutputFlag), err))

cmd/root.go

@@ -3,14 +3,14 @@
 package cmd
 
 import (
-	"errors"
 	"fmt"
 	"log"
 	"os"
 	"path/filepath"
 	"strings"
 
 	"github.com/google/uuid"
+	"github.com/pkg/errors"
 	"github.com/spf13/cobra"
 	"github.com/spf13/viper"
 
@@ -68,6 +68,7 @@ func (cmd RootCmd) Execute() error {
 }
 
 func NewRootCommand(
+	configService config.Service,
 	analyticsTrackerFn analytics.TrackerFn,
 	clients APIClients,
 	version string,
@@ -182,7 +183,7 @@ func NewRootCommand(
 		return nil, err
 	}
 
-	configCmd := configcmd.NewConfigCmd(analyticsTrackerFn)
+	configCmd := configcmd.NewConfigCmd(configService, analyticsTrackerFn)
 	cmd.AddCommand(configCmd.Cmd())
 	cmd.AddCommand(NewQuickStartCmd(analyticsTrackerFn, clients.EnvironmentsClient, clients.FlagsClient))
 	cmd.AddCommand(resourcecmd.NewResourcesCmd())
@@ -213,10 +214,12 @@ func Execute(version string) {
 		ProjectsClient:     projects.NewClient(version),
 		ResourcesClient:    resources.NewClient(version),
 	}
+	configService := config.NewService(resources.NewClient(version))
 	trackerFn := analytics.ClientFn{
 		ID: uuid.New().String(),
 	}
 	rootCmd, err := NewRootCommand(
+		configService,
 		trackerFn.Tracker(version),
 		clients,
 		version,

cmd/validators/validators.go

@@ -1,11 +1,11 @@
 package validators
 
 import (
-	"errors"
 	"fmt"
 	"net/url"
 	"strings"
 
+	"github.com/pkg/errors"
 	"github.com/spf13/cobra"
 	"github.com/spf13/pflag"
 	"github.com/spf13/viper"
@@ -46,7 +46,8 @@ func CmdError(err error, commandPath string, baseURI string) error {
 	if strings.Contains(err.Error(), cliflags.AccessTokenFlag) {
 		errorMessage += "\n\n"
 		if baseURI != "" {
-			errorMessage += fmt.Sprintf("Go to %s/settings/authorization to create an access token.\n", baseURI)
+			errorMessage += errs.AccessTokenInvalidErrMessage(baseURI)
+			errorMessage += "\n"
 		}
 		errorMessage += fmt.Sprintf("Use `ldcli config --set %s <value>` to configure the value to persist across CLI commands.\n\n", cliflags.AccessTokenFlag)
 	} else {

cmd/validators/validators_test.go

@@ -1,9 +1,9 @@
 package validators_test
 
 import (
-	"errors"
 	"testing"
 
+	"github.com/pkg/errors"
 	"github.com/stretchr/testify/assert"
 
 	"github.com/launchdarkly/ldcli/cmd/validators"

internal/config/config_service.go

@@ -0,0 +1,29 @@
+package config
+
+import (
+	"fmt"
+
+	"github.com/launchdarkly/ldcli/internal/resources"
+)
+
+type Service struct {
+	client resources.Client
+}
+
+func NewService(client resources.Client) Service {
+	return Service{
+		client: client,
+	}
+}
+
+// VerifyAccessToken is true if the given access token is valid to make API requests.
+func (s Service) VerifyAccessToken(accessToken string, baseURI string) bool {
+	path := fmt.Sprintf(
+		"%s/api/v2/account",
+		baseURI,
+	)
+
+	_, err := s.client.MakeRequest(accessToken, "HEAD", path, "application/json", nil, nil)
+
+	return err == nil
+}

internal/config/config_test.go

@@ -2,11 +2,15 @@ package config_test
 
 import (
 	"fmt"
-	"github.com/launchdarkly/ldcli/internal/config"
+	"net/http"
 	"testing"
 
+	"github.com/pkg/errors"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
+
+	"github.com/launchdarkly/ldcli/internal/config"
+	"github.com/launchdarkly/ldcli/internal/resources"
 )
 
 func TestNewConfig(t *testing.T) {
@@ -132,3 +136,24 @@ func TestNewConfig(t *testing.T) {
 		})
 	})
 }
+
+func TestService_VerifyAccessToken(t *testing.T) {
+	t.Run("is valid with a valid access token", func(t *testing.T) {
+		service := config.NewService(&resources.MockClient{})
+
+		isValid := service.VerifyAccessToken("valid-access-token", "http://test.com")
+
+		assert.True(t, isValid)
+	})
+
+	t.Run("is invalid with an invalid access token", func(t *testing.T) {
+		service := config.NewService(&resources.MockClient{
+			StatusCode: http.StatusUnauthorized,
+			Err:        errors.New("invalid access token"),
+		})
+
+		isValid := service.VerifyAccessToken("invalid-access-token", "http://test.com")
+
+		assert.False(t, isValid)
+	})
+}

internal/errors/errors.go

@@ -115,3 +115,7 @@ func normalizeUnauthorizedJSON() ([]byte, error) {
 
 	return errMsg, nil
 }
+
+func AccessTokenInvalidErrMessage(baseURI string) string {
+	return fmt.Sprintf("Go to %s/settings/authorization to create an access token.", baseURI)
+}

internal/errors/errors_test.go

@@ -2,10 +2,10 @@ package errors_test
 
 import (
 	"encoding/json"
-	"errors"
 	"testing"
 
 	ldapi "github.com/launchdarkly/api-client-go/v14"
+	"github.com/pkg/errors"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 

internal/resources/mock_client.go

@@ -1,10 +1,15 @@
 package resources
 
-import "net/url"
+import (
+	"net/http"
+	"net/url"
+)
 
 type MockClient struct {
-	Input    []byte
-	Response []byte
+	Err        error
+	Input      []byte
+	Response   []byte
+	StatusCode int
 }
 
 var _ Client = &MockClient{}
@@ -16,5 +21,9 @@ func (c *MockClient) MakeRequest(
 ) ([]byte, error) {
 	c.Input = data
 
+	if c.StatusCode > http.StatusBadRequest {
+		return c.Response, c.Err
+	}
+
 	return c.Response, nil
 }