Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help 
glab(1)								       glab(1)

NAME
       glab-auth-dpop-gen  -  Generates	a DPoP (demonstrating-proof-of-posses-
       sion) proof JWT.	(EXPERIMENTAL)

SYNOPSIS
       glab auth dpop-gen [flags]

DESCRIPTION
       Demonstrating-proof-of-possession (DPoP)	is a technique to cryptograph-
       ically bind personal access tokens to their owners. This	 command  pro-
       vides  the  tools  to manage the	client aspects of DPoP.	It generates a
       DPoP proof JWT (JSON Web	Token).

       Prerequisites:

       • You must have a SSH key pair in RSA, ed25519, or ECDSA	format.

       • You  have  enabled   DPoP   for   your	  account   <https://docs.git-
	 lab.com/user/profile/personal_access_tokens/#use-dpop-with-per-
	 sonal-access-tokens>.

       Use  the	 JWT  in combination with a Personal Access Token (PAT)	to au-
       thenticate to the GitLab	API. Your JWT remains valid for	5 minutes. Af-
       ter it expires, you must	generate another token.	Your SSH  private  key
       is then used to sign the	JWT.

       This  feature is	an experiment and is not ready for production use.  It
       might be	unstable or removed at any time.  For  more  information,  see
       https://docs.gitlab.com/policy/development_stages_support/.

OPTIONS
       --hostname="gitlab.com"	    The	hostname of the	GitLab instance	to au-
       thenticate with.	Defaults to 'gitlab.com'.

       --pat=""	     Personal Access Token (PAT) to generate a DPoP proof for.
       Defaults	 to  the token set with	'glab auth login'. Returns an error if
       both are	empty.

       -p, --private-key=""	 Location of the private SSH key on the	 local
       system.

OPTIONS	INHERITED FROM PARENT COMMANDS
       -h, --help[=false]      Show help for this command.

EXAMPLE
       # Generate a DPoP JWT for authentication	to GitLab
       $ glab auth dpop-gen [flags]
       $ glab auth dpop-gen --private-key "~/.ssh/id_rsa" --pat	"glpat-xxxxxxxxxxxxxxxxxxxx"

       # No PAT	required if you	previously used	the 'glab auth login' command with a PAT
       $ glab auth dpop-gen --private-key "~/.ssh/id_rsa"

       # Generate a DPoP JWT for a different GitLab instance
       $ glab auth dpop-gen --private-key "~/.ssh/id_rsa" --hostname "https://gitlab.com"

SEE ALSO
       glab-auth(1)

Auto generated by spf13/cobra	   Mar 2026			       glab(1)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=glab-auth-dpop-gen&sektion=1&manpath=FreeBSD+Ports+15.0.quarterly>

home | help