Method InitClient

cli/root.go:674–725

InitClient creates and configures a new client with authentication, telemetry, and version checks.

(inv *serpent.Invocation)

// InitClient creates and configures a new client with authentication, telemetry,
// and version checks.
func (r *RootCmd) InitClient(inv *serpent.Invocation) (*codersdk.Client, error) {
	if err := r.ensureClientURL(); err != nil {
		return nil, err
	}
	if r.token == "" {
		tok, err := r.ensureTokenBackend().Read(r.clientURL)
		// Even if there isn't a token, we don't care.
		// Some API routes can be unauthenticated.
		if err != nil && !xerrors.Is(err, os.ErrNotExist) {
			if xerrors.Is(err, sessionstore.ErrNotImplemented) {
				return nil, errKeyringNotSupported
			}
			return nil, err
		}
		if tok != "" {
			r.token = tok
		}
	}

	// Load TLS config from files if specified
	if err := r.ensureTLSConfig(); err != nil {
		return nil, err
	}

	// Configure HTTP client with transport wrappers
	httpClient, err := r.createHTTPClient(inv.Context(), r.clientURL, inv)
	if err != nil {
		return nil, err
	}

	clientOpts := []codersdk.ClientOption{
		codersdk.WithSessionToken(r.token),
		codersdk.WithHTTPClient(httpClient),
	}

	if r.disableDirect {
		clientOpts = append(clientOpts, codersdk.WithDisableDirectConnections())
	}

	if r.tlsConfig != nil {
		clientOpts = append(clientOpts, codersdk.WithDERPTLSConfig(r.tlsConfig))
	}

	if r.debugHTTP {
		clientOpts = append(clientOpts,
			codersdk.WithPlainLogger(os.Stderr),
			codersdk.WithLogBodies(),
		)
	}

	return codersdk.New(r.clientURL, clientOpts...), nil
}

// TryInitClient is similar to InitClient but doesn't error when credentials are missing.
// This allows commands to run without requiring authentication, but still use auth if available.