#!/usr/bin/env bash
# Génère un token d'accès ObsiGate longue durée pour le client MCP
# Conteneur de test local: obsigate-test (adapter le nom selon l'instance)
docker exec -i obsigate-test python - <<'PYEOF'
import time, uuid, json
from jose import jwt
key = open("data/secret.key").read().strip()
u = json.load(open("data/users.json"))["users"]["admin"]
now = int(time.time())
tok = jwt.encode({
    "sub": "admin",
    "role": u["role"],
    "vaults": u["vaults"],
    "jti": str(uuid.uuid4()),
    "iat": now,
    "exp": now + 31536000,   # 1 an
    "type": "access",
}, key, algorithm="HS256")
print(tok)
PYEOF