DEVP-660: Improve 403 Forbidden error message with permission guidance

.gitignore

@@ -74,3 +74,4 @@ target/
 
 
 src/workato_platform_cli/_version.py
+.workato-ignore

first_cp/my_new_recipe.recipe.json

@@ -0,0 +1,21 @@
+{
+  "name": "My new recipe",
+  "description": "",
+  "version": 1,
+  "private": true,
+  "concurrency": 1,
+  "code": {
+    "number": 0,
+    "keyword": "trigger",
+    "input": {
+    },
+    "block": [
+
+    ],
+    "uuid": "455da0fe-638d-4c30-9408-f06b13da3e5c",
+    "unfinished": false
+  },
+  "config": [
+
+  ]
+}

openapitools.json

@@ -2,6 +2,6 @@
   "$schema": "./node_modules/@openapitools/openapi-generator-cli/config.schema.json",
   "spaces": 2,
   "generator-cli": {
-    "version": "7.14.0"
+    "version": "7.16.0"
   }
 }

src/workato_platform_cli/cli/utils/exception_handler.py

@@ -246,11 +246,19 @@ def _handle_auth_error(e: UnauthorizedException) -> None:
         return
 
     click.echo("❌ Authentication failed")
-    click.echo("   Your API token may be invalid")
-    click.echo("💡 Please check your authentication:")
+    click.echo("   Your API token may be invalid or lack sufficient permissions")
+    click.echo()
+    click.echo("💡 This could be due to:")
+    click.echo("   • Invalid or expired API token")
+    click.echo("   • API client lacking required permissions for this operation")
+    click.echo()
+    click.echo("🔧 To resolve:")
     click.echo("   • Verify your API token is correct")
     click.echo("   • Run 'workato profiles list' to check your profile")
     click.echo("   • Run 'workato profiles use' to update your credentials")
+    click.echo()
+    click.echo("📚 Learn more about permissions required for API client")
+    click.echo("   https://docs.workato.com/en/platform-cli.html#authentication")
 
 
 def _handle_forbidden_error(e: ForbiddenException) -> None:
@@ -274,6 +282,7 @@ def _handle_forbidden_error(e: ForbiddenException) -> None:
     if error_details:
         click.echo(f"   {error_details}")
 
+    click.echo()
     click.echo("💡 Please check:")
     click.echo("   • Your account has the required permissions")
     click.echo("   • You're working in the correct workspace/folder")

src/workato_platform_cli/client/workato_api/docs/User.md

@@ -17,7 +17,7 @@ Name | Type | Description | Notes
 **interested_applications** | **List[str]** |  | [optional] 
 **company_name** | **str** |  | 
 **location** | **str** |  | 
-**last_seen** | **datetime** |  | 
+**last_seen** | **datetime** |  | [optional] 
 **contact_phone** | **str** |  | [optional] 
 **contact_email** | **str** |  | [optional] 
 **about_me** | **str** |  | [optional] 

src/workato_platform_cli/client/workato_api/models/user.py

@@ -39,7 +39,7 @@ class User(BaseModel):
     interested_applications: Optional[List[StrictStr]] = None
     company_name: Optional[StrictStr]
     location: Optional[StrictStr]
-    last_seen: datetime
+    last_seen: Optional[datetime] = None
     contact_phone: Optional[StrictStr] = None
     contact_email: Optional[StrictStr] = None
     about_me: Optional[StrictStr] = None
@@ -98,6 +98,11 @@ def to_dict(self) -> Dict[str, Any]:
         if self.location is None and "location" in self.model_fields_set:
             _dict['location'] = None
 
+        # set to None if last_seen (nullable) is None
+        # and model_fields_set contains the field
+        if self.last_seen is None and "last_seen" in self.model_fields_set:
+            _dict['last_seen'] = None
+
         # set to None if contact_phone (nullable) is None
         # and model_fields_set contains the field
         if self.contact_phone is None and "contact_phone" in self.model_fields_set:

workato-api-spec.yaml

@@ -1469,7 +1469,6 @@ components:
         - recipes_count
         - company_name
         - location
-        - last_seen
         - email
         - active_recipes_count
         - root_folder_id
@@ -1518,6 +1517,7 @@ components:
         last_seen:
           type: string
           format: date-time
+          nullable: true
           example: "2020-08-23T23:22:24.329-07:00"
         contact_phone:
           type: string