migrate GoDaddy auth → Bearer PAT (TK-10 key rotation); sso-key fallback retained

19c7026022df378e5313b0c8a9f003342e5e64e2 · 2026-07-27 20:04:55 -0700 · Steve Abrams

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Files touched

M finish_dns.sh

Diff

commit 19c7026022df378e5313b0c8a9f003342e5e64e2
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Mon Jul 27 20:04:55 2026 -0700

    migrate GoDaddy auth → Bearer PAT (TK-10 key rotation); sso-key fallback retained
    
    Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 finish_dns.sh | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/finish_dns.sh b/finish_dns.sh
index 02e7a6c..ade3625 100755
--- a/finish_dns.sh
+++ b/finish_dns.sh
@@ -26,6 +26,10 @@ fi
 
 CF="$CLOUDFLARE_API_TOKEN"
 
+# Prefer a Bearer PAT when present (TK-10 key rotation); else legacy sso-key.
+GD_PAT="${GODADDY_PAT:-}"
+if [ -n "$GD_PAT" ]; then GD_AUTH="Bearer $GD_PAT"; else GD_AUTH="sso-key $GODADDY_API_KEY:$GODADDY_API_SECRET"; fi
+
 echo "=== Step 1: Get Cloudflare zone ==="
 ZONE=$(curl -sS -H "Authorization: Bearer $CF" "https://api.cloudflare.com/client/v4/zones?name=$DOMAIN")
 ZONE_ID=$(echo "$ZONE" | python3 -c "import json,sys; d=json.load(sys.stdin); r=d.get('result',[]); print(r[0]['id'] if r else 'NOT_FOUND')")
@@ -39,7 +43,7 @@ echo ""
 echo "=== Step 2: Repoint GoDaddy NS to Cloudflare ==="
 NS_JSON=$(echo "$ZONE" | python3 -c "import json,sys; d=json.load(sys.stdin); print(json.dumps(d['result'][0]['name_servers']))")
 curl -sS -X PATCH "https://api.godaddy.com/v1/domains/$DOMAIN" \
-  -H "Authorization: sso-key $GODADDY_API_KEY:$GODADDY_API_SECRET" \
+  -H "Authorization: $GD_AUTH" \
   -H "Content-Type: application/json" \
   --data "{\"nameServers\":$NS_JSON}" \
   -w "\nHTTP %{http_code}\n"

← 4243238 corner-nav: move login to its own hamburger in upper-left (p · back to Chinoiseriewallpaper · (newest)