auth: revert to old /users/login endpoint for issuing tokens (#110)

fixes #108

the new endpoint has some additional restrictions
that we weren't aware of. we're still tracking
down what those restrictions are and what we should
recommend users do instead. for now, just revert
to the old route, so we have time to write appropriate
docs on how to migrate.

Signed-off-by: Nick Santos <[email protected]>

Author: nicks

internal/auth/token.go

@@ -62,19 +62,19 @@ func (p *LoginTokenProvider) EnsureToken(ctx context.Context) (string, error) {
 
 	// Request new token
 	auth := struct {
-		Identifier string `json:"identifier"`
-		Secret     string `json:"secret"`
+		Username string `json:"username"`
+		Password string `json:"password"`
 	}{
-		Identifier: p.username,
-		Secret:     p.password,
+		Username: p.username,
+		Password: p.password,
 	}
 
 	authJSON, err := json.Marshal(auth)
 	if err != nil {
 		return "", fmt.Errorf("marshal auth: %v", err)
 	}
 
-	req, err := http.NewRequestWithContext(ctx, "POST", fmt.Sprintf("%s/auth/token", p.baseURL), bytes.NewBuffer(authJSON))
+	req, err := http.NewRequestWithContext(ctx, "POST", fmt.Sprintf("%s/users/login", p.baseURL), bytes.NewBuffer(authJSON))
 	if err != nil {
 		return "", err
 	}
@@ -91,14 +91,14 @@ func (p *LoginTokenProvider) EnsureToken(ctx context.Context) (string, error) {
 	}
 
 	var tokenResponse struct {
-		AccessToken string `json:"access_token"`
+		Token string `json:"token"`
 	}
 	if err := json.NewDecoder(res.Body).Decode(&tokenResponse); err != nil {
 		return "", fmt.Errorf("decode token response: %v", err)
 	}
 
 	// Parse token expiry
-	claims, err := getClaims(tokenResponse.AccessToken)
+	claims, err := getClaims(tokenResponse.Token)
 	if err != nil {
 		return "", fmt.Errorf("parse token claims: %v", err)
 	}
@@ -107,7 +107,7 @@ func (p *LoginTokenProvider) EnsureToken(ctx context.Context) (string, error) {
 	}
 
 	// Cache the token
-	p.token = tokenResponse.AccessToken
+	p.token = tokenResponse.Token
 	p.tokenExpiry = claims.Expiry.Time()
 
 	return p.token, nil