Authentication Patterns

# Workflow Integration Examples

Examples of integrating the interactive authentication module into existing workflows.

## Pattern: Pre-Flight Authentication Check

Add authentication check at the start of any workflow requiring external service access.

### Before: Manual Auth Check

```bash
# Old way - manual check, unclear error handling
if ! gh auth status &>/dev/null; then
  echo "Error: Not authenticated"
  echo "Run: gh auth login"
  exit 1
fi

gh pr view 123
```

### After: Interactive Auth with Caching

```bash
# New way - interactive auth with caching
source plugins/leyline/scripts/interactive_auth.sh

ensure_auth github || exit 1

gh pr view 123
```

## Example 1: PR Review Command

```bash
#!/usr/bin/env bash
# /pr-review command

# Source interactive auth
source plugins/leyline/skills/authentication-patterns/modules/interactive_auth.sh

# Ensure GitHub authentication
if ! ensure_auth github; then
  echo "❌ GitHub authentication required for PR review"
  exit 1
fi

# Get PR number
PR_NUMBER="${1:-$(gh pr view --json number -q .number)}"

# Continue with workflow
echo "Reviewing PR #$PR_NUMBER..."
gh pr view "$PR_NUMBER"
gh api "repos/owner/repo/pulls/$PR_NUMBER/comments"
```

**Benefits:**
- ✅ User is prompted to authenticate if needed
- ✅ Auth status cached for 5 minutes
- ✅ Session persists for 24 hours
- ✅ Works in CI/CD with `GITHUB_TOKEN`

## Example 2: Create Issue Command

```bash
#!/usr/bin/env bash
# /create-issue command

source plugins/leyline/skills/authentication-patterns/modules/interactive_auth.sh

# Ensure authentication
if ! ensure_auth github; then
  echo "❌ GitHub authentication required to create issues"
  exit 1
fi

# Parse arguments
TITLE="$1"
shift

# Create issue
gh issue create --title "$TITLE" "$@"
```

## Example 3: Multi-Service Workflow

```bash
#!/usr/bin/env bash
# Sync issues from GitHub to GitLab

source plugins/leyline/skills/authentication-patterns/modules/interactive_auth.sh

# Authenticate both services
ensure_auth github || exit 1
ensure_auth gitlab || exit 1

# Sync issues
gh issue list --json number,title | \
  jq -r '.[] | "\(.number)|\(.title)"' | \
  while IFS='|' read -r num title; do
    glab issue create --title "gh-$num: $title"
  done
```

## Example 4: Batch Operations with Wrapper Functions

```bash
#!/usr/bin/env bash
# Batch PR operations

source plugins/leyline/skills/authentication-patterns/modules/interactive_auth.sh

# Use wrapper functions for cleaner code
gh_api_with_auth "repos/owner/repo/pulls" | \
  jq -r '.[].number' | \
  while read -r pr_num; do
    gh_with_auth pr view "$pr_num"
  done
```

## Example 5: CI/CD Pipeline Integration

```yaml
# .github/workflows/pr-review.yml
name: PR Review

on:
  pull_request:
    types: [opened, synchronize]

jobs:
  review:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3

      - name: Setup Python
        uses: actions/setup-python@v4
        with:
          python-version: '3.11'

      - name: Install Claude Code plugins
        run: |
          # Plugin setup here
          :

      - name: Run PR Review
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          AUTH_INTERACTIVE: false  # Force non-interactive mode
        run: |
          source plugins/leyline/skills/authentication-patterns/modules/interactive_auth.sh

          # Will use GITHUB_TOKEN from environment
          if ! ensure_auth github; then
            echo "GitHub authentication failed"
            exit 1
          fi

          # Run review
          /pr-review ${{ github.event.pull_request.number }}
```

**Key Points:**
- `AUTH_INTERACTIVE=false` forces non-interactive mode
- `GITHUB_TOKEN` is used automatically (GitHub Actions provides it)
- No browser prompts in CI/CD environment

## Example 6: Fix PR Command Integration

```bash
#!/usr/bin/env bash
# /fix-pr command

source plugins/leyline/skills/authentication-patterns/modules/interactive_auth.sh

# Ensure authentication before starting workflow