#10355 chore: show a Meltano domain in the Meltano Cloud login and logout URLs Pull request opened by ReubenFrankel Description Since #10328,

meltano cloud auth login

and

meltano cloud auth logout --web

print and open URLs on

<http://identity.matatika.com|identity.matatika.com>

, a domain that a Meltano user does not know. The URLs now start with

<https://link.meltano.com/login>

and

<https://link.meltano.com/logout>

. Both are short links that redirect to the Auth0 authorization and logout endpoints. They carry no parameters, so the CLI sends the same parameters as before. •

CloudAuthConfig.authorize_url

returns the new

LOGIN_LINK

. •

CloudAuthConfig.logout_url

returns the new

LOGOUT_LINK

. Both links redirect to the same Auth0 URLs that the CLI built before. The other Auth0 requests do not go through the browser, so they still use

<http://identity.matatika.com|identity.matatika.com>

. Why the links carry no parameters The CLI must send 3 parameters itself.

code_challenge

and

state

are new random values on each login, for PKCE and for CSRF protection.

redirect_uri

names the callback port that is free,

9999

or

9998

. The other parameters could be in the login link, but that makes a second copy of them. The CLI still needs

client_id

for the token exchange, the token refresh and the token revoke. These are

POST

requests from the CLI, and a

302

redirect cannot carry them. The client ID would then be in 3 places: the code, the login link and the logout link. With plain redirects, every parameter stays in the code, where the tests cover it. When Auth0 moves to a Meltano domain, only

LOGIN_LINK

and

LOGOUT_LINK

change. Checklist • I have read the contribution guide Was generative AI tooling used to co-author this PR? • Yes (please specify the tool below) Generated-by: Claude Code following the agentic coding guidelines Related Issues None. --- 🤖 Generated with Claude Code Summary by Sourcery Use Meltano domain links for cloud authentication login and logout flows. New Features: • Present Meltano-branded login and logout links for cloud authentication flows. Enhancements: • Keep Auth0 authorization and logout destinations behind user-facing Meltano domain links while preserving the required authentication parameters. Tests: • Update cloud authentication tests to validate the Meltano login and logout links and authorization parameters. meltano/meltano