Is it possilbe to set the access control JWT token from the CLI

[PDS]

Hello,

I can’t find a reference in the docs, but on the off chance it is possible and not documented.

Is it possible to set the JWT secret for the access control for a site using the CLI?

Thanks,

Paul

[clarnx]

Hello @PDS , thanks for posting.
You can learn how to manage your environment variables with Netlify CLI by visiting the reference API documentation link below.

https://cli.netlify.com/commands/env/

Alternatively Netlify has a blog post on how to manage your environment variables using the Netlify CLI. Below is the blog post link.

Managing environment variables from your terminal with Netlify CLI

Hope this helps.

[coelmay]

Hey @PDS

As per the post below, there is currently no way of reading the JWT

Verify JWT token

Hi there @turtlebits, Right now there is no way to get your account’s JWT secret. What I generally do is use a Netlify function to authenticate the token. Another option is to use a signed proxy redirect so you can confirm that the request is coming via Netlify. More info on JWS can be found at Introducing Structured Redirects and Headers

You might also find the following post (from the same thread) relevant

Verify JWT token

Hi @romain1304, As @futuregerald mentioned here: You’d have to hardcode the secret in your Netlify Function. Considering your publish directory might be different from functions directory, the function’s code cannot be read by anyone else, it should not be a problem. If it’s in a public repo, you’d have to set the secret in an environment variable and then access it using process.env.VAR_NAME.

[PDS]

@clarnx

Hi - thanks for your reply.

Those docs are what lead me to ask the question. I am able to manage all my env variables, but the access control JWT secret sits outside of this in the UI and is not listed in the those docs. So I just wondered if it was possible but not documented.

Thanks,

Paul

[fool]

I believe it should be possible using our API, but not documented, and possibly not doable via CLI - not entirely sure if you can run non-documented API calls via the CLI? However, you can do it . Following the workflow here:

[Support Guide] Understanding and using Netlify's API

Last reviewed by Netlify Support staff: August 2023 Did you know that Netlify has an extensive public API? Anything that you configure in our Admin UI at https://app.netlify.com is managed using this same API, and you’re welcome to use it to create and configure your site(s) and perform most other operations on your account. We have an article on API Usage in our official documentation which shows how to do some common tasks like deploying your site and configuring it in great detail. It also …

…I reverse engineered what our UI does and this seems to be the API call in question (for the site):

HTTP PUT https://api.netlify.com/api/v1/sites/SITE_ID
with payload:

{jwt_secret:"the secret"}

Try that out (preferably on a non-production site), and let me know how it goes!

[PDS]

@fool

Just circling back to say that your solution worked.

FYI I had to add it to the body in the api call:

"body": {
  "jwt_secret":"the secret"
}

I came across that issue before when adding a custom subdomain and support were in touch with the CLI team and that was the solution.

Thanks for you help, I now have a single deploy script that does everything I need

Cheers…
Paul

[hillary]

Thanks for coming back and letting us know! Happy building!

[PDS]

@hillary

No worries. I think it is important to close things off so people have a reference point. I get plenty of mileage out of other posts in the community

Cheers
Paul

[hillary]

That is great to hear-- I am glad you find this community helpful! I may be biased, but I also think it is pretty great