CLI reference
storeenv login
Sign in through the browser and unlock your identity on this device.
zsh
$ storeenv loginOpening https://storeenv.app/auth/cli?state=9d94c1... in your browserCode 4821-QK (it must match the one in your browser)Device key SE:90FF-F3CE-12D8 (type it where you approve this device)Waiting for authorization... (Ctrl+C to cancel)Signed in as @adaThis is your first device. Creating your StoreEnv identity...Your recovery phrase is shown in the browser. Save it there, then confirm 3 words.
$ storeenv login
Flags
--browser | Open the browser (use --no-browser on SSH sessions). Default: true. |
--recovery-phrase | Enrol this device with your recovery phrase. |
The first sign in of a new account; the code and device key change every time.
Good to know
- The browser does the signing in: email and password, or a sign in method you connected (GitHub, GitLab or Google when they are turned on). The terminal never sees your password.
- The terminal listens on 127.0.0.1 for a single use code and swaps it for tokens with a direct call. Check that the code in the terminal matches the one in the browser.
- On a new account the recovery phrase is shown in the browser, where terminal scrollback can't keep it. On a new device of an existing account, approve it from a device you already use, or pass --recovery-phrase.
- Over SSH use --no-browser and open the printed address on any machine.
Related commands
Global flags
--project <value> | Project as <namespace/name> or its id (default: .storeenv.json, then this repository's remotes). |
--env <value> | Environment name. |
--json | Machine readable output. |
--yes, -y | Skip confirmations. |
--color | Coloured output (--no-color to turn off). Default: true. |
--verbose | Show debug details. |
--api <value> | API base URL of a self-hosted StoreEnv. |
--trust-writer <value> | Trust a writer for this run: @login=SE:XXXX-XXXX-XXXX. |
--allow-unsigned | pull and diff: use values that aren't signed by a trusted writer, after you confirm on a terminal (or with STOREENV_ALLOW_UNSIGNED=1). Never applies to run or copy. |