Make --identity-token an alias of --password

[shizhMSFT]

What is the version of your ORAS CLI

v0.16.0

What would you like to be added?

Make --identity-token an alias of --password

Why is this needed for ORAS?

oras supports using identity token as the credential without a username.

The UX of oras login $REGISTRY --password $TOKEN does not seem good enough. It will be better if it is

oras login $REGISTRY --identity-token $TOKEN

Are you willing to submit PRs to contribute to this feature?

• Yes, I am willing to implement it.

[qweeah]

What if a user mistakenly use oras login $REGISTRY --username $USERNAME --identity-token $TOKEN

[shizhMSFT]

What if a user mistakenly use oras login $REGISTRY --username $USERNAME --identity-token $TOKEN

I think we should return error for this case.

[rafiya2003]

I would like to work on this

[qweeah]

@rafiya2003 If you have any questions, feel free to join oras slack and ping me

[qweeah]

Not all registry support token refreshing from identity token to registry token. E.g. ghcr returns 405 for token refreshing.

@shizhMSFT We should also add a flag --registry-token allow user to use registry token in oras commands.

[shizhMSFT]

Not all registry support token refreshing from identity token to registry token. E.g. ghcr returns 405 for token refreshing.

@shizhMSFT We should also add a flag --registry-token allow user to use registry token in oras commands.

That can be another issue and I noticed that you have created one #968

[sbdtu5498]

I have completed the implementation. Will try to push it soon,

[qweeah]

@sbdtu5498 Any update on this?

[sbdtu5498]

Oh sorry for the delays. I was busy with some other stuff and left the task hanging. Will push it before Monday.

[qweeah]

@shizhMSFT Do we also need --registry-token-stdin?

[shizhMSFT]

@shizhMSFT Do we also need --registry-token-stdin?

SGTM but is that --identity-token-stdin?

[qweeah]

@sbdtu5498 So we need to add another flag to enable read identity token from stdin like:

echo $TOKEN | oras login $REGISTRY --identity-token-stdin 

[sbdtu5498]

Sure, will do it ASAP. Sorry for the delayed response.