login with browser using nonce

[dynamite-bud]

Initially we would login from the wasmer-cli using the wasmer login command which would in turn ask for the token.

For this token a person would explicitly had to go to the wasmer registry make a token, then come back and save the token in the CLI. this is very unpleasant in terms of DX.

1. So this PR makes the WASMER_CLI have an option to login using the browser by making a nonce, querying the GraphQL api from the registry with a callback URL.
2. Then person authorizes himself on the frontend of the website and comes back to the CLI and he is authorized now and his token is saved in the config file.

[syrusakbary]

Comments:

• Logic needs to be in wasmer login, not in wasmer login-with-browser. Basically the old logic should work if people do wasmer login THE_TOKEN, but if people simply do wasmer login, the browser path should be chosen
• We should not show in any way SERVER url, or the token. The output should be as follows:

$ wasmer login 
Opening auth link in your default browser: https://frontend-git-867-add-auth-flow-for-the-wasmer-cli-frontend-wapm.vercel.app/auth/cli?nonce_id=nnc_ZR4qIGtAiZA2&secret=kX2GjcvqlI6oR12mHaB3_HtqqS3go1EMRTBNJJIg-Rc
Waiting for session... Done
Login for Wasmer user "syrusakbary" saved

If the user cancels the auth in the browser, the output should be:

$ wasmer login 
Opening auth link in your default browser: https://frontend-git-867-add-auth-flow-for-the-wasmer-cli-frontend-wapm.vercel.app/auth/cli?nonce_id=nnc_ZR4qIGtAiZA2&secret=kX2GjcvqlI6oR12mHaB3_HtqqS3go1EMRTBNJJIg-Rc
Waiting for session... Cancelled by the user

If the user takes more than (10 mins? ask @ayys) to complete, the output should be:

$ wasmer login 
Opening auth link in your default browser: https://frontend-git-867-add-auth-flow-for-the-wasmer-cli-frontend-wapm.vercel.app/auth/cli?nonce_id=nnc_ZR4qIGtAiZA2&secret=kX2GjcvqlI6oR12mHaB3_HtqqS3go1EMRTBNJJIg-Rc
Waiting for session... Timed out (10 mins exceeded)

[ayys]

Yup, nonces expire after 1- minutes (configurable via Doppler)

[dynamite-bud]

@syrusakbary the behaviour exists on wasmer login

[syrusakbary]

We should set it to 5 mins min? 1 min seems very quick

[syrusakbary]

@syrusakbary the behaviour exists on wasmer login

What behavior are you referring to?

[dynamite-bud]

@syrusakbary the behaviour exists on wasmer login

What behavior are you referring to?

$ wasmer login --registry https://registry.wasmer.wtf/graphql 
Server URL: http://localhost:64307
Opening browser at https://frontend-git-add-auth-flow-for-the-wasmer-cli-frontend-wapm.vercel.app/auth/cli?nonce_id=nnc_YIZteiOYR&secret=R2diNa5dcXzbJ9abCotp7-Eorag
Token: wap_f77d01da79caad37f7e1553850b271c2b61b***
Shutting down server
Login for Wasmer user "xorcist" saved

[syrusakbary]

Missing:

• Texts should be the same as prompted
• Fix the frontend with the cancel user
• 10 minutes in the CLI not working
• Use hyper

[syrusakbary]

Texts as suggestions means: text as I suggested in a previous comment: #4057 (comment)

[syrusakbary]

This should be wasmer.io not wtf ?

[dynamite-bud]

Those are tests @syrusakbary

[dynamite-bud]

closes #4034