Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
glab(1)								       glab(1)

NAME
       glab-auth-dpop-gen  -  Generates	a DPoP (demonstrating-proof-of-posses-
       sion) proof JWT.	(EXPERIMENTAL)

SYNOPSIS
       glab auth dpop-gen [flags]

DESCRIPTION
       Demonstrating-proof-of-possession (DPoP)	is a technique to cryptograph-
       ically bind personal access tokens to their owners. This	 command  pro-
       vides  the  tools  to manage the	client aspects of DPoP.	It generates a
       DPoP proof JWT (JSON Web	Token).

       Prerequisites:

        You must have a SSH key pair in RSA, ed25519, or ECDSA	format.

        You have enabled DPoP for your	account, as described  in  the	GitLab
	 documentation.	    <https://docs.gitlab.com/user/profile/personal_ac-
	 cess_tokens/#require-dpop-headers-with-personal-access-tokens>

       Use the JWT in combination with a Personal Access Token	(PAT)  to  au-
       thenticate to the GitLab	API. Your JWT remains valid for	5 minutes. Af-
       ter  it	expires, you must generate another token. Your SSH private key
       is then used to sign the	JWT.

       This feature is experimental. It	might be broken	or removed without any
       prior notice.  Read more	about what experimental	features mean at

       <https://docs.gitlab.com/policy/development_stages_support/>

       Use experimental	features at your own risk.

OPTIONS
       --hostname="gitlab.com"	    The	hostname of the	GitLab instance	to au-
       thenticate with.	Defaults to 'gitlab.com'.

       --pat=""	     Personal Access Token (PAT) to generate a DPoP proof for.
       Defaults	to the token set with 'glab auth login'. Returns an  error  if
       both are	empty.

       -p,  --private-key=""	  Location of the private SSH key on the local
       system.

OPTIONS	INHERITED FROM PARENT COMMANDS
       -h, --help[=false]      Show help for this command.

EXAMPLE
       # Generate a DPoP JWT for authentication	to GitLab
       $ glab auth dpop-gen [flags]
       $ glab auth dpop-gen --private-key "~/.ssh/id_rsa" --pat	"glpat-xxxxxxxxxxxxxxxxxxxx"

       # No PAT	required if you	previously used	the 'glab auth login' command with a PAT
       $ glab auth dpop-gen --private-key "~/.ssh/id_rsa"

       # Generate a DPoP JWT for a different GitLab instance
       $ glab auth dpop-gen --private-key "~/.ssh/id_rsa" --hostname "https://gitlab.com"

SEE ALSO
       glab-auth(1)

Auto generated by spf13/cobra	   Nov 2025			       glab(1)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=glab-auth-dpop-gen&sektion=1&manpath=FreeBSD+Ports+15.0>

home | help