mx-auth-login

To authenticate to a MixShift warehouse for automated pipelines, you can set up service credentials for unattended runs. This token-based flow securely stores credentials without exposing raw passwords, enabling scheduled tasks.

Secure token-based access for MixShift data gateways is handled through interactive sign-ins or service credential setup. It uses device-code orchestration and PKCE browser flow to ensure credentials are stored safely.

MixShift authentication does not require IP whitelisting or raw MySQL passwords. The token-based flow securely manages access through the data gateway, eliminating the need for manual network configurations.

To start an interactive sign-in for MixShift warehouse access, run the authentication command and follow the on-screen instructions. This utilizes a PKCE browser flow and collects self-attested work emails for session attribution.

The mx-legacy-auth service is required because the MixShift secure access process operates within the constraints of the MixShift data gateway. It provides the necessary backend support for both interactive and service credential authentication.

You can use service credentials for unattended runs without exposing database passwords. The token-based authentication mechanism ensures raw MySQL passwords are never exposed during scheduled tasks or CI pipeline executions.