IP-only authentication

[pkong-ds]

Use Case

To authenticate a deployer access just by IP, no github user or github action

Problem

Running pageship deploy -y on a valid IP still prompts Github Username input

$ pageship deploy --site main -y
✗ GitHub user name: █

pageship.toml

[app]
id = "nba-result-prediction"

team = [
{ ipRange="94.190.220.240/32", access="deployer" }
]
...

Investigation

• Seems every command runs ensureAuth, which requires a token that can only be obtained by githubOIDC or githubSSH
• access-control.md seems to suggest that IP-only authentication is available (or is it just an additional check on top of user auth token?)