Files

T

Ben Fornefeld 5370d54bfa feat(cli): replace access token auth with Hydra OAuth flow (#1481 )

## Summary

Restructures the CLI config schema to v1 with nested , , and sections.
Replaces the legacy e2b access token auth with a Hydra OAuth flow using
refresh tokens. Token expiry is decoded from the JWT claim at runtime
instead of being stored.

## Changes

- **New config schema (v1)**: , , , , ,  (ISO timestamp)
- **Token refresh**: decodes from the JWT access token, refreshes via
Hydra when expired, writes only (not )
- **Deprecated config handling**: Old flat configs without are deleted
with a re-login prompt. No migration path — users re-authenticate.
- ****: Set on  and , not on token refresh
- ****: New helper for direct error throwing without type narrowing;
auth commands use it instead of
- **Type-safe team responses**: Removed  casts, use  type extraction
- **Logout**: Revokes refresh token via Hydra before deleting config;
fixed crash when deprecated config already deleted by
- **Removed**: Token expiry display from ,  from 

## Config example

```json
{
  "version": 1,
  "identity": { "email": "user@example.com" },
  "oauth": { "token_endpoint": "https://hydra.../oauth2/token", "client_id": "..." },
  "tokens": { "access_token": "...", "refresh_token": "..." },
  "last_refresh": "2024-06-24T12:00:00.000Z",
  "teamName": "...", "teamId": "...", "teamApiKey": "..."
}
```

## Test plan

- [x] `pnpm run typecheck` passes
- [x] `pnpm exec eslint` passes on changed files
- [x] `pnpm exec prettier --check` passes
- [x] `pnpm exec vitest run tests/user_config_permissions.test.ts`
passes
- [ ] Manual: `e2b auth login` writes v1 config
- [ ] Manual: token refresh via `e2b auth configure` with expired JWT
- [ ] Manual: old flat config triggers deprecation and re-login

Depends on: dashboard PR adding the Hydra OAuth CLI flow

---------

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>

2026-06-24 18:03:55 -07:00

src

feat(cli): replace access token auth with Hydra OAuth flow (#1481 )

2026-06-24 18:03:55 -07:00

testground/demo-basic

New infra (#212 )

2023-11-06 15:07:09 +01:00

tests

feat(cli): replace access token auth with Hydra OAuth flow (#1481 )

2026-06-24 18:03:55 -07:00

.envrc

Ensure that httpx transport is reused across calls by default (#997 )

2025-11-14 16:48:29 -08:00

.eslintrc.cjs

Migrate CLI to Beta SDK

2024-09-13 09:59:45 +02:00

.gitignore

feat: add template migration to CLI (#880 )

2025-09-19 17:41:28 +02:00

.prettierignore

feat: add template init for new template SDK (#881 )

2025-09-26 06:40:58 -07:00

LICENSE

Added license sources to SDKs (#761 )

2025-06-05 07:10:07 -07:00

package.json

[skip ci] Release new versions (sync repo with published packages) (#1468 )

2026-06-22 10:15:33 -07:00

README.md

docs: fix duplicate logo on NPM/PyPI by switching to <picture> element (#1466 )

2026-06-19 19:26:46 +00:00

tsconfig.json

Migrate CLI to Beta SDK

2024-09-13 09:59:45 +02:00

tsup.config.js

feat: add template migration to CLI (#880 )

2025-09-19 17:41:28 +02:00

vitest.config.ts

fix: CLI tests setup (#969 )

2025-10-17 05:03:18 -07:00

README.md

E2B CLI

This CLI tool allows you to build manager your running E2B sandbox and sandbox templates. Learn more in our documentation.

1. Install the CLI

Using Homebrew (on macOS)

brew install e2b

Using NPM

npm install -g @e2b/cli

2. Authenticate

e2b auth login

Note

To authenticate without the ability to open the browser, provide E2B_ACCESS_TOKEN as an environment variable. You can find your token in Account Settings under the Team selector at e2b.dev/dashboard. Then use the CLI like this: E2B_ACCESS_TOKEN=sk_e2b_... e2b template create.

Important

Note the distinction between E2B_ACCESS_TOKEN and E2B_API_KEY.

3. Check out docs

Visit our CLI documentation to learn more.