Log In With Vault Credentials

1
import { Bctrl } from "@bctrl/sdk";
2
3
const bctrl = new Bctrl({ apiKey: process.env.BCTRL_API_KEY! });
4
5
await bctrl.vault.upsert("clients/acme/login", {
6
  type: "login",
7
  username: "[email protected]",
8
  password: process.env.ACME_PASSWORD!,
9
  totpSecret: process.env.ACME_TOTP!,      // the 2FA seed, not a code
10
  origins: ["https://app.acme.com"],       // where this login may be used
11
});

1
const toolset = await bctrl.toolsets.create({
2
  name: "acme-login",
3
  builtins: ["vault"],
4
});
5
6
const runtime = await bctrl.runtimes.create({ type: "browser", name: "vault-login" });
7
await bctrl.runtimes.start(runtime.id);
8
9
const result = await bctrl.runtimes.invocations.createAndWait(
10
  runtime.id,
11
  {
12
    action: "browserUse",
13
    instruction:
14
      "Go to https://app.acme.com, sign in with the stored Acme login (including the one-time code), and confirm the dashboard loads.",
15
    toolsetId: toolset.id,
16
  },
17
  { timeoutMs: 300_000 }
18
);
19
20
console.log(result.status);

1
const login = await bctrl.vault.value("clients/acme/login");
2
if (login.type !== "login") throw new Error("expected a login secret");
3
4
await page.goto("https://app.acme.com/signin");
5
await page.fill("#email", login.username);
6
await page.fill("#password", login.password);
7
await page.click("button[type=submit]");
8
9
// The 2FA prompt - mint the code now, TOTP codes expire in ~30s.
10
const { code } = await bctrl.vault.totp("clients/acme/login");
11
await page.fill("#otp", code);
12
await page.click("button[type=submit]");