Skip to content

feat(auth): add --use-auth-broker flag for Daytona/sandboxed environments#434

Merged
khaliqgant merged 1 commit into
mainfrom
feature/auth-broker-flag
Feb 18, 2026
Merged

feat(auth): add --use-auth-broker flag for Daytona/sandboxed environments#434
khaliqgant merged 1 commit into
mainfrom
feature/auth-broker-flag

Conversation

@khaliqgant
Copy link
Copy Markdown
Member

@khaliqgant khaliqgant commented Feb 18, 2026

Summary

  • Add --use-auth-broker CLI flag to the agent-relay auth command
  • When set, passes useAuthBroker: true to /api/auth/ssh/start endpoint
  • Updates status messages to reflect auth broker mode instead of workspace
  • Enables CLI authentication for Daytona/sandboxed environments that don't expose SSH

Usage

# Existing workspace-based auth (default)
npx agent-relay auth claude --workspace=<ID>

# New auth broker mode (for Daytona/sandboxed environments)
npx agent-relay auth claude --use-auth-broker

Test plan

  • Verify --use-auth-broker flag is recognized by CLI
  • Verify flag passes useAuthBroker: true in request body
  • Verify status messages show "Auth Broker" when flag is set
  • Integration test with cloud API (requires relay-cloud changes)

🤖 Generated with Claude Code


Open with Devin

…ents

Add a new CLI flag to the `auth` command that routes authentication
through a dedicated auth broker instead of the user's workspace SSH.

This enables CLI authentication for environments like Daytona sandboxes
that don't expose SSH ports. When the flag is set:

- The `/api/auth/ssh/start` request includes `useAuthBroker: true`
- The cloud API returns auth broker SSH credentials instead of workspace SSH
- Status messages reflect "Auth Broker" instead of workspace info
- Success message indicates credentials are stored centrally

The auth broker handles credential extraction and storage via the
Token Service, making credentials available to all sandboxed workspaces.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Copy link
Copy Markdown
Contributor

@devin-ai-integration devin-ai-integration Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no potential bugs to report.

View in Devin Review to see 3 additional findings.

Open in Devin Review

@khaliqgant khaliqgant merged commit 8259b6b into main Feb 18, 2026
37 checks passed
@khaliqgant khaliqgant deleted the feature/auth-broker-flag branch February 18, 2026 16:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant