netlify: import token from netlify-cli config.json

netlify login stores the token in config.json under users.<userId>.auth.token
(~/Library/Preferences/netlify on macOS, ~/.config/netlify on Linux), per
https://docs.netlify.com/api-and-cli-guides/cli-guides/get-started-with-cli/#configjson-location.
Keep the NETLIFY_AUTH_TOKEN importer and also try the config file.

Author: rr3khan

plugins/netlify/personal_access_token.go

@@ -1,6 +1,8 @@
 package netlify
 
 import (
+	"context"
+
 	"github.com/1Password/shell-plugins/sdk"
 	"github.com/1Password/shell-plugins/sdk/importer"
 	"github.com/1Password/shell-plugins/sdk/provision"
@@ -22,10 +24,48 @@ func PersonalAccessToken() schema.CredentialType {
 			},
 		},
 		DefaultProvisioner: provision.EnvVars(defaultEnvVarMapping),
-		Importer:           importer.TryEnvVarPair(defaultEnvVarMapping),
+		Importer: importer.TryAll(
+			importer.TryEnvVarPair(defaultEnvVarMapping),
+			importer.MacOnly(TryNetlifyConfigFile("~/Library/Preferences/netlify/config.json")),
+			importer.LinuxOnly(TryNetlifyConfigFile("~/.config/netlify/config.json")),
+		),
 	}
 }
 
 var defaultEnvVarMapping = map[string]sdk.FieldName{
 	"NETLIFY_AUTH_TOKEN": fieldname.Token,
 }
+
+// TryNetlifyConfigFile imports the token that `netlify login` stores in the global config.json,
+// under users.<userId>.auth.token for the active userId.
+func TryNetlifyConfigFile(path string) sdk.Importer {
+	return importer.TryFile(path, func(ctx context.Context, contents importer.FileContents, in sdk.ImportInput, out *sdk.ImportAttempt) {
+		var config Config
+		if err := contents.ToJSON(&config); err != nil {
+			out.AddError(err)
+			return
+		}
+
+		user, ok := config.Users[config.UserID]
+		if !ok || user.Auth.Token == "" {
+			return
+		}
+
+		out.AddCandidate(sdk.ImportCandidate{
+			Fields: map[sdk.FieldName]string{
+				fieldname.Token: user.Auth.Token,
+			},
+		})
+	})
+}
+
+type Config struct {
+	UserID string                `json:"userId"`
+	Users  map[string]ConfigUser `json:"users"`
+}
+
+type ConfigUser struct {
+	Auth struct {
+		Token string `json:"token"`
+	} `json:"auth"`
+}

plugins/netlify/personal_access_token_test.go

@@ -37,5 +37,38 @@ func TestPersonalAccessTokenImporter(t *testing.T) {
 				},
 			},
 		},
+		"config file (macOS)": {
+			OS: "darwin",
+			Files: map[string]string{
+				"~/Library/Preferences/netlify/config.json": plugintest.LoadFixture(t, "config.json"),
+			},
+			ExpectedCandidates: []sdk.ImportCandidate{
+				{
+					Fields: map[sdk.FieldName]string{
+						fieldname.Token: "nfp_kV9wTq3ZtN0aB4cD7eF1gH5iJ8kL2mN6EXAMPLE",
+					},
+				},
+			},
+		},
+		"config file (Linux)": {
+			OS: "linux",
+			Files: map[string]string{
+				"~/.config/netlify/config.json": plugintest.LoadFixture(t, "config.json"),
+			},
+			ExpectedCandidates: []sdk.ImportCandidate{
+				{
+					Fields: map[sdk.FieldName]string{
+						fieldname.Token: "nfp_kV9wTq3ZtN0aB4cD7eF1gH5iJ8kL2mN6EXAMPLE",
+					},
+				},
+			},
+		},
+		"config file (logged out)": {
+			OS: "darwin",
+			Files: map[string]string{
+				"~/Library/Preferences/netlify/config.json": `{"telemetryDisabled": false, "cliId": "55f2daf5-ee38-4fa0-8fd8-e67892a123d6", "userId": null}`,
+			},
+			ExpectedCandidates: nil,
+		},
 	})
 }

plugins/netlify/test-fixtures/config.json

@@ -0,0 +1,16 @@
+{
+	"telemetryDisabled": false,
+	"cliId": "55f2daf5-ee38-4fa0-8fd8-e67892a123d6",
+	"userId": "5f3a1b2c4d5e6f7a8b9c0d1e",
+	"users": {
+		"5f3a1b2c4d5e6f7a8b9c0d1e": {
+			"id": "5f3a1b2c4d5e6f7a8b9c0d1e",
+			"name": "Wendy Appleseed",
+			"email": "wendy.appleseed@example.com",
+			"auth": {
+				"token": "nfp_kV9wTq3ZtN0aB4cD7eF1gH5iJ8kL2mN6EXAMPLE",
+				"github": {}
+			}
+		}
+	}
+}