infisical login
Login into Infisical from the CLI
Description
The CLI uses authentication to verify your identity. When you enter the correct email and password for your account, a token is generated and saved in your system Keyring to allow you to make future interactions with the CLI.
To change where the login credentials are stored, visit the vaults command.
If you have added multiple users, you can switch between the users by using the user command.
Flags
--method
--method
Valid values for the method
flag are:
user
: Login using email and password.universal-auth
: Login using a universal auth client ID and client secret.
When method
is set to universal-auth
, the client-id
and client-secret
flags are required. Optionally you can set the INFISICAL_UNIVERSAL_AUTH_CLIENT_ID
and INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET
environment variables instead of using the flags.
When you authenticate with universal auth, an access token will be printed to the console upon successful login. This token can be used to authenticate with the Infisical API and the CLI by passing it in the --token
flag when applicable.
Use flag --plain
along with --silent
to print only the token in plain text when using the universal-auth
method.
--client-id
--client-id
Description
The client ID of the universal auth client. This is required if the --method
flag is set to universal-auth
.
The client-id
flag can be substituted with the INFISICAL_UNIVERSAL_AUTH_CLIENT_ID
environment variable.
--client-secret
--client-secret
Description
The client secret of the universal auth client. This is required if the --method
flag is set to universal-auth
.
The client-secret
flag can be substituted with the INFISICAL_UNIVERSAL_AUTH_CLIENT_SECRET
environment variable.