Mint Token

1#!/usr/bin/env bash
2# Mints a fresh Wix CLI token for a migration project's site and writes it
3# directly into config/wix.env as WIX_AUTH_TOKEN — never printing the value.
4#
5# Usage (from the migration project root):
6#   bash scripts/mint-token.sh
7#
8# Reads WIX_SITE_ID from config/wix.env.
9# Requires: npx @wix/cli@latest (logged in — check: npx @wix/cli@latest whoami)
10#
11# This is the canonical copy. rp-import-codegen copies it into
12# migrations/<project>/scripts/mint-token.sh during project scaffolding.
13
14set -euo pipefail
15
16SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
17PROJECT_ROOT="$(dirname "$SCRIPT_DIR")"
18CONFIG_FILE="$PROJECT_ROOT/config/wix.env"
19
20if [[ ! -f "$CONFIG_FILE" ]]; then
21  echo "Error: config file not found: $CONFIG_FILE" >&2
22  exit 1
23fi
24
25WIX_SITE_ID=$(grep '^WIX_SITE_ID=' "$CONFIG_FILE" | cut -d'=' -f2- | tr -d '[:space:]')
26
27if [[ -z "$WIX_SITE_ID" ]]; then
28  echo "Error: WIX_SITE_ID is blank in $CONFIG_FILE" >&2
29  exit 1
30fi
31
32echo "Minting token for site $WIX_SITE_ID ..." >&2
33
34# Capture token only on stdout; suppress CLI spinner/progress on stderr
35TOKEN=$(npx @wix/cli@latest token --site "$WIX_SITE_ID" 2>/dev/null | tr -d '[:space:]')
36
37if [[ -z "$TOKEN" ]]; then
38  echo "Error: token command returned empty output" >&2
39  exit 1
40fi
41
42# Write into config (replace existing line, or append).
43# Not `sed -i`: BSD/macOS sed requires a backup-suffix argument for -i, so the
44# portable-looking GNU form silently consumes the expression as the suffix.
45# The token is passed through the environment, never as an awk -v value or on a
46# command line, so no escape processing can corrupt it and it stays out of `ps`.
47if grep -q '^WIX_AUTH_TOKEN=' "$CONFIG_FILE"; then
48  TMP_FILE="$(mktemp "${TMPDIR:-/tmp}/wix.env.XXXXXX")"
49  trap 'rm -f "$TMP_FILE"' EXIT
50  RP_NEW_TOKEN="$TOKEN" awk '
51    /^WIX_AUTH_TOKEN=/ { print "WIX_AUTH_TOKEN=" ENVIRON["RP_NEW_TOKEN"]; next }
52    { print }
53  ' "$CONFIG_FILE" > "$TMP_FILE"
54  # Copy contents rather than mv, so the config file keeps its own permissions.
55  cat "$TMP_FILE" > "$CONFIG_FILE"
56  rm -f "$TMP_FILE"
57else
58  printf '\nWIX_AUTH_TOKEN=%s\n' "$TOKEN" >> "$CONFIG_FILE"
59fi
60
61TOKEN_LEN=${#TOKEN}
62unset TOKEN
63
64echo "✓ WIX_AUTH_TOKEN written to config/wix.env ($TOKEN_LEN chars)" >&2