Alexa Amundson
78fbe80f2a
bin/ 230 CLI tools (ask-*, br-*, agent-*, roadid, carpool) scripts/ 99 automation scripts fleet/ Node configs and deployment workers/ Cloudflare Worker sources (roadpay, road-search, squad webhooks) roadc/ RoadC programming language roadnet/ Mesh network (5 APs, WireGuard) operator/ Memory system scripts config/ System configs dotfiles/ Shell configs docs/ Documentation BlackRoad OS — Pave Tomorrow. RoadChain-SHA2048: d1a24f55318d338b RoadChain-Identity: alexa@sovereign RoadChain-Full: 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
50 lines
1.8 KiB
Bash
Executable File
50 lines
1.8 KiB
Bash
Executable File
#!/bin/bash
|
|
# Refresh Cloudflare OAuth token and update stats-proxy service
|
|
# Runs on Mac, pushes fresh token to all Pis
|
|
|
|
CLIENT_ID="54d11594-84e4-41aa-b438-e81b8fa78ee7"
|
|
TOKEN_URL="https://dash.cloudflare.com/oauth2/token"
|
|
WRANGLER_CONFIG="$HOME/.wrangler/config/default.toml"
|
|
|
|
# Get current refresh token
|
|
REFRESH_TOKEN=$(grep 'refresh_token' "$WRANGLER_CONFIG" | cut -d'"' -f2)
|
|
|
|
if [ -z "$REFRESH_TOKEN" ]; then
|
|
echo "ERROR: No refresh token found"
|
|
exit 1
|
|
fi
|
|
|
|
# Refresh the token
|
|
RESPONSE=$(curl -s -X POST "$TOKEN_URL" \
|
|
-H "Content-Type: application/x-www-form-urlencoded" \
|
|
-d "grant_type=refresh_token&refresh_token=$REFRESH_TOKEN&client_id=$CLIENT_ID" 2>/dev/null)
|
|
|
|
NEW_TOKEN=$(echo "$RESPONSE" | python3 -c "import sys,json; print(json.load(sys.stdin).get('access_token',''))" 2>/dev/null)
|
|
NEW_REFRESH=$(echo "$RESPONSE" | python3 -c "import sys,json; print(json.load(sys.stdin).get('refresh_token',''))" 2>/dev/null)
|
|
|
|
if [ -z "$NEW_TOKEN" ]; then
|
|
echo "ERROR: Token refresh failed"
|
|
echo "$RESPONSE"
|
|
exit 1
|
|
fi
|
|
|
|
echo "Token refreshed: ${NEW_TOKEN:0:20}..."
|
|
|
|
# Update wrangler config
|
|
python3 -c "
|
|
import re
|
|
with open('$WRANGLER_CONFIG') as f: c = f.read()
|
|
c = re.sub(r'oauth_token = \"[^\"]+\"', 'oauth_token = \"$NEW_TOKEN\"', c)
|
|
c = re.sub(r'refresh_token = \"[^\"]+\"', 'refresh_token = \"$NEW_REFRESH\"', c)
|
|
with open('$WRANGLER_CONFIG', 'w') as f: f.write(c)
|
|
"
|
|
|
|
# Push to all Pis
|
|
for node in "blackroad@192.168.4.96" "pi@192.168.4.97" "pi@192.168.4.49"; do
|
|
ip=$(echo $node | cut -d@ -f2)
|
|
ssh -o ConnectTimeout=5 $node "sudo sed -i 's|CF_API_TOKEN=.*|CF_API_TOKEN=$NEW_TOKEN|' /etc/systemd/system/stats-proxy.service && sudo systemctl daemon-reload && sudo systemctl restart stats-proxy" 2>/dev/null && \
|
|
echo " Updated $ip" || echo " Failed $ip"
|
|
done
|
|
|
|
echo "$(date -u '+%Y-%m-%dT%H:%M:%SZ') Token refreshed and distributed"
|