Authentication | Nebula Docs

NEBULA-CLI-AUTH(1)

Nebula Manual

NAMEauthentication — Authenticate with Nebula registries using Better Auth.

SOURCEnebula/crates/nebula-cli/src/main.rs (AuthCommand)

STATUSpre-alpha · protocol in design

Register an account

Create a new account on a registry.

output

neb auth register --registry-url https://registry.example.com
neb auth register --registry-url https://registry.example.com --email user@example.com --name "User Name" --password <password>

Login with credentials

Authenticate with email and password.

output

neb auth login --registry-url https://registry.example.com --email user@example.com --password <password>

Login with token

Authenticate using an API token. Tokens can also be provided via NEBULA_AUTH_TOKEN environment variable.

output

neb auth login --registry-url https://registry.example.com --token <api-token>
NEBULA_AUTH_TOKEN=<token> neb push origin

Scoped authentication

Scope authentication to a specific organization and repository for least-privilege access.

output

neb auth login --registry-url <url> --token <token> --org <org-id> --repository <repo-id> --scope nebula.repository:sync_objects

Check auth status

Verify current authentication state.

output

neb auth status
neb auth status --registry-url https://registry.example.com
neb auth status --remote origin

Logout

Remove stored credentials for a registry.

output

neb auth logout --registry-url https://registry.example.com
neb auth logout --remote origin

API token management

Create, list, and revoke API tokens from an authenticated session.

output

# Create a new API token
neb auth token create <name> --remote origin --scope nebula.repository:sync_objects

# List existing tokens
neb auth token list --remote origin

# Revoke a token
neb auth token revoke <token-id> --remote origin

Credential storage

Credentials are stored in the OS keychain when available. A plaintext fallback exists for local development only.

output

# Enable plaintext fallback (development only)
NEBULA_AUTH_PLAINTEXT_STORE=1 neb auth login ...