basic refresh auth login

atproto/client/cmd/atclient/main.go

···
 	"os"
 
 	"github.com/bluesky-social/indigo/atproto/client"
+	"github.com/bluesky-social/indigo/atproto/identity"
+	"github.com/bluesky-social/indigo/atproto/syntax"
 
 	"github.com/urfave/cli/v2"
 )
···
 				Usage:  "do a basic GET request",
 				Action: runGet,
 			},
+			&cli.Command{
+				Name:   "login-refresh",
+				Usage:  "do a basic login and GET request",
+				Action: runLoginRefresh,
+				Flags: []cli.Flag{
+					&cli.StringFlag{
+						Name:     "username",
+						Required: true,
+						Aliases:  []string{"u"},
+						Usage:    "handle or DID (not email)",
+					},
+					&cli.StringFlag{
+						Name:     "password",
+						Required: true,
+						Aliases:  []string{"p"},
+						Usage:    "password (or app password)",
+					},
+				},
+			},
 		},
 	}
 	h := slog.NewTextHandler(os.Stderr, &slog.HandlerOptions{Level: slog.LevelDebug})
···
 	app.RunAndExitOnError()
 }
 
+func simpleGet(ctx context.Context, c *client.APIClient) error {
+	params := map[string]string{
+		"actor":       "atproto.com",
+		"limit":       "5",
+		"includePins": "false",
+	}
+
+	var d json.RawMessage
+	err := c.Get(ctx, "app.bsky.feed.getAuthorFeed", params, &d)
+	if err != nil {
+		return err
+	}
+
+	out, err := json.MarshalIndent(d, "", "  ")
+	if err != nil {
+		return err
+	}
+	fmt.Println(string(out))
+	return nil
+}
+
 func runGet(cctx *cli.Context) error {
 	ctx := context.Background()
 
···
 		Host: "https://public.api.bsky.app",
 	}
 
-	params := map[string]string{
-		"actor":       "atproto.com",
-		"limit":       "5",
-		"includePins": "false",
+	return simpleGet(ctx, &c)
+}
+
+func runLoginRefresh(cctx *cli.Context) error {
+	ctx := context.Background()
+
+	atid, err := syntax.ParseAtIdentifier(cctx.String("username"))
+	if err != nil {
+		return err
 	}
-	b, err := c.Get(ctx, "app.bsky.feed.getAuthorFeed", params)
+
+	dir := identity.DefaultDirectory()
+	ident, err := dir.Lookup(ctx, *atid)
 	if err != nil {
 		return err
 	}
 
-	out, err := json.MarshalIndent(b, "", "  ")
+	c := client.APIClient{
+		Host: ident.PDSEndpoint(),
+	}
+
+	_, err = client.NewSession(ctx, &c, atid.String(), cctx.String("password"), "")
 	if err != nil {
 		return err
 	}
-	fmt.Println(string(out))
-	return nil
+
+	return simpleGet(ctx, &c)
 }

atproto/client/refresh_auth.go

···
 package client
 
 import (
+	"context"
+	"fmt"
 	"net/http"
+	"sync"
+
+	comatproto "github.com/bluesky-social/indigo/api/atproto"
 
 	"github.com/bluesky-social/indigo/atproto/syntax"
 )
···
 	DID          syntax.DID
 	// The AuthHost might different from any APIClient host, if there is an entryway involved
 	AuthHost string
+
+	lk sync.Mutex
 }
 
 // TODO:
···
 func (a *RefreshAuth) AccountDID() syntax.DID {
 	return a.DID
 }
+
+// updates the client with the new auth method
+func NewSession(ctx context.Context, client *APIClient, username, password, token string) (*RefreshAuth, error) {
+
+	reqBody := comatproto.ServerCreateSession_Input{
+		Identifier: username,
+		Password:   password,
+	}
+	if token != "" {
+		reqBody.AuthFactorToken = &token
+	}
+
+	var out comatproto.ServerCreateSession_Output
+	err := client.Post(ctx, syntax.NSID("com.atproto.server.createSession"), &reqBody, &out)
+	if err != nil {
+		return nil, err
+	}
+
+	if out.Active != nil && *out.Active == false {
+		return nil, fmt.Errorf("account is disabled: %s", out.Status)
+	}
+
+	ra := RefreshAuth{
+		AccessToken:  out.AccessJwt,
+		RefreshToken: out.RefreshJwt,
+		DID:          syntax.DID(out.Did),
+		// TODO: authHost / PDS host distinction
+		AuthHost: client.Host,
+	}
+	client.Auth = &ra
+	return &ra, nil
+}