
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
@commercelayer/cli-plugin-token
Advanced tools
commercelayer COMMAND
commercelayer [COMMAND] (--help | -h) for detailed information about plugin commands.
commercelayer token:assertion
commercelayer token:decode TOKEN
commercelayer token:get
commercelayer token:revoke TOKEN
commercelayer token:assertion
Generate an assertion to be used with the jwt bearer flow.
USAGE
$ commercelayer token:assertion -o <value> [-t Customer|User] [-c | -u] [-C <value>...] [-j]
FLAGS
-C, --custom=<value>... custom claim attribute [key=value]
-c, --customer owner of type 'Customer'
-j, --json print assertion in json format
-o, --ownerId=<value> (required) the owner id
-t, --type=<option> the type of the owner
<options: Customer|User>
-u, --user owner of type 'User'
DESCRIPTION
generate an assertion to be used with the jwt bearer flow
EXAMPLES
cl token:assertion -t <Customer|User> -o <ownerId>
cl token:assertion -co <ownerId> -j
cl token:assertion -to <ownerId> -C key1=value1 -C key2=value2 key3=value3
See code: src/commands/token/assertion.ts
commercelayer token:decode TOKEN
Decode a Commerce Layer access token.
USAGE
$ commercelayer token:decode TOKEN [-f]
ARGUMENTS
TOKEN the access token to be decoded
FLAGS
-f, --full show the full token info
DESCRIPTION
decode a Commerce Layer access token
ALIASES
$ commercelayer token:info
EXAMPLES
$ commercelayer token:decode <accessToken>
$ cl token:info <accessToken> -f
See code: src/commands/token/decode.ts
commercelayer token:get
Get a new access token.
USAGE
$ commercelayer token:get [-o <value>] (-s <value> -i <value>) [-S <value>... ] [--info] [-a <value> | [-e
<value> -p <value>] | ]
FLAGS
-S, --scope=<value>... access token scope (market, stock location)
-a, --assertion=<value> use jwt assertion
-e, --email=<value> customer email
-i, --clientId=<value> (required) application client_id
-o, --organization=<value> the slug of your organization
-p, --password=<value> customer secret password
-s, --clientSecret=<value> application client_secret
--info show access token info
DESCRIPTION
get a new access token
EXAMPLES
$ commercelayer token:get -o <organizationSlug> -i <clientId> -s <clientSecret>
$ cl token:get -o <organizationSlug> -i <clientId> -S <scope> --info
$ cl token:get -i <clientId> -s <clientSecret> -a <jwtAssertion>
See code: src/commands/token/get.ts
commercelayer token:revoke TOKEN
Revoke a Commerce Layer access token.
USAGE
$ commercelayer token:revoke TOKEN [-o <value>] (-s <value> -i <value>) [-S <value>... ]
ARGUMENTS
TOKEN access token to revoke
FLAGS
-S, --scope=<value>... access token scope
-i, --clientId=<value> (required) application client_id
-o, --organization=<value> the slug of your organization
-s, --clientSecret=<value> application client_secret
DESCRIPTION
revoke a Commerce Layer access token
EXAMPLES
$ commercelayer token:revoke -o <organizationSlug> <accessToken> -i <clientId>
$ cl token:revoke -o <organizationSlug> <accessToken> -i <clientId> -s <clientSecret>
See code: src/commands/token/revoke.ts
FAQs
Commerce Layer CLI Token plugin
We found that @commercelayer/cli-plugin-token demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
Security News
Socket now integrates with Bun 1.3’s Security Scanner API to block risky packages at install time and enforce your organization’s policies in local dev and CI.
Research
The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean state-sponsored actors.