Authentication commands#

Authentication commands use the installed runtime and its configured backend. Install a matching runtime first. Run jitx auth login for browser sign-in; email/password sign-in is an explicit alternative.

jitx auth#

Choose an authentication operation; the group itself shows help.

jitx auth login#

By default, print a browser sign-in link and wait for approval. Supplying --email selects password authentication; the password is prompted unless --password-stdin is set. For noninteractive password sign-in, supply both options. Do not put a password in a command-line argument.

jitx auth login
jitx auth login --email engineer@example.com

Argument / option

Default

Meaning

--email

unset

Sign in with email + password instead of the browser. Pair with –password-stdin in scripts.

--password-stdin

false

Read the password from stdin instead of prompting interactively.

jitx auth install-token#

Install an administrator-issued license token on a machine that cannot complete interactive sign-in. Supply exactly one of --file or --stdin. The input may be a bare token or exported JSON containing token and optionally refresh_token. This writes local licensing state; it does not start a design server.

jitx auth install-token --file license-token.json

Argument / option

Default

Meaning

--file

unset

Read the exported token from FILE.

--stdin

false

Read the exported token from stdin.

jitx auth logout#

Relinquish the server-side license and clear local authentication files.

jitx auth logout

jitx auth machine-id#

Print the machine identifier used for license binding.

jitx auth machine-id

jitx auth show#

Show authentication state and license details. By default, ask the launcher to validate the license. --trust reads the on-disk token without that validation; it is useful when the launcher is unavailable, but does not prove the license is currently accepted by the backend.

jitx auth show

Argument / option

Default

Meaning

--trust

false

Trust the on-disk token without asking the launcher to validate it. Useful in scripts or sandboxed environments where the launcher binary isn’t reachable.

jitx auth refresh#

Exchange the saved refresh token for a renewed license and update local state. This requires a refresh token and backend access.

jitx auth refresh

jitx auth plans#

With no subcommand, list available plans. Use pick to select a plan.

jitx auth plans

jitx auth plans pick#

Select a license plan. Supply exactly one of --free or --subscription. Selecting a subscription requires an available paid seat.

jitx auth plans pick --subscription

Argument / option

Default

Meaning

--free

false

Pick the free and open tier.

--subscription

false

Pick a paid subscription seat.

jitx auth backend#

With no subcommand, show the configured backend. Use set to change it.

jitx auth backend

jitx auth backend set#

Supply exactly one of --prod, --testing, or --url. Switching signs out of the old backend before writing the new configuration. --docs-url accompanies a custom --url; predefined deployments choose their own documentation URL.

jitx auth backend set --prod

Argument / option

Default

Meaning

--prod

false

Switch to production (app.jitx.com).

--testing

false

Switch to the testing deployment (app-testing.jitx.com).

--url

unset

Switch to an arbitrary backend URL. Accepted verbatim — useful for local dev (e.g. http://localhost:8000).

--docs-url

unset

Override the docs URL written to user.params. Only meaningful with –url; –prod and –testing pick the matching docs site.