Skip to main content

dataspine sts exchange-ssh-pop-token

Exchange an SSH ed25519 proof-of-possession token for a Dataspine access token.

Usage​

dataspine sts exchange-ssh-pop-token [OPTIONS] <PRINCIPAL_ID>

Arguments​

  • <PRINCIPAL_ID>: The Dataspine principal UUID to use for the exchange.

Options​

  • -a, --application <APPLICATION>: Optional application UUID to scope the exchange.
  • --private-key <PRIVATE_KEY_PATH>: Path to an OpenSSH ssh-ed25519 private key (e.g. ~/.ssh/id_ed25519).
  • --public-key <PUBLIC_KEY_PATH>: Path to the corresponding OpenSSH public key (e.g. ~/.ssh/id_ed25519.pub).

Notes​

This command fetches a nonce from the security-token-service and signs it with your ssh-ed25519 private key, then exchanges the signed proof for a Dataspine access token.

Examples​

Exchange using a local SSH keypair:

dataspine sts exchange-ssh-pop-token \
  --private-key ~/.ssh/id_ed25519 \
  --public-key ~/.ssh/id_ed25519.pub \
  00000000-0000-0000-0000-000000000000