Request for –no-browser option for pomerium-cli

[rajivr]

Is your feature request related to a problem? Please describe.

Follow-up from the Pomerium Forum post

Currently when using pomerium-cli, it automatically launches a browser when a connection needs to be setup.

For example, when I run this command, and connect to Redis, Firefox browser is automatically launched.

$ ./pomerium-cli tcp redis.localhost.pomerium.io:6379 --listen localhost:6379 --alternate-ca-path ./root_ca.crt --browser-cmd "firefox"
{"level":"debug","time":"2024-10-04T15:06:48+05:30","message":"pkg/cryptutil: added custom certificate authority"}
2024/10/04 15:06:48 listening on 127.0.0.1:6379
Your browser has been opened to visit:

https://authenticate.pomerium.app/.pomerium/sign_in?...

2024/10/04 15:09:20 connection established
2024/10/04 15:09:20 connection closed

Describe the solution you'd like

AWS CLI has an option --no-browser that disables automatically opening the verification URL using the default browser.

This option is very helpful when we want to manually copy and paste the URL into our current browser instance.

Would it be possible to introduce a similar option for pomerium-cli? Thank you!

[nrontsis]

+1

[nrontsis]

I am using echo as browser-cmd to mitigate this for now:

Host aRoute.corp.example.pomerium.com
    ProxyCommand /usr/bin/pomerium-cli tcp --browser-cmd echo --listen - %h:%p