Merge 'feature/yg/meego-7022395131-ve-login-support' into 'master'

feat(login): support console login

See merge request: !65

Author: bytestarter

README.EN.MD

@@ -307,6 +307,72 @@ After logout, run `ve sso login` to keep using the same account and role. Run `v
 - What should I enter for Scopes?
   Usually nothing. The default is `cloudidentity:account:access,offline_access`. If you enter scopes manually, only `cloudidentity:account:access` and `offline_access` are allowed; the CLI deduplicates and validates them.
 
+#### Console Login (login)
+
+```shell
+# Sign in with the default profile. If region is omitted, the CLI prompts for it
+ve login
+
+# Recommended: specify profile and region; profile/region support -p/-r
+ve login -p dev -r cn-beijing
+
+# Use cross-device login for headless, remote-server, or container environments
+ve login -p dev -r cn-beijing --remote
+```
+
+This command signs in through the Volcengine Console using OAuth 2.0 + PKCE, caches temporary STS credentials locally, and lets later service commands reuse the temporary credentials from that profile.
+
+Parameters:
+- `--profile, -p`: configuration profile name; defaults to `default`
+- `--region, -r`: region; when omitted, the CLI prompts for it and uses `cn-beijing` if you press Enter
+- `--remote`: cross-device login; open the URL printed by the CLI in a browser, finish login, and paste the full authorization code shown in the browser back into the terminal
+- `--endpoint-url`: sign-in service endpoint; defaults to `https://signin.volcengine.com` and normally does not need to be changed
+
+Notes:
+- After login, the profile is written with `mode` set to `console-login` and a `login-session`
+- After logging in with a non-`default` profile, service commands do not automatically switch profiles; run `ve configure profile --profile dev` first
+- Use `--remote` when the browser cannot redirect back to the machine running the CLI
+
+End-to-end example:
+
+```shell
+# 1. Sign in and write the dev profile
+ve login --profile dev --region cn-beijing
+
+# 2. If dev is not the current default profile, switch the active profile first
+ve configure profile --profile dev
+
+# 3. Service commands use the console-login temporary credentials from the current profile
+ve ecs DescribeInstances
+
+# 4. When finished, clear the local login state
+ve logout --profile dev
+```
+
+#### Console Logout (logout)
+
+```shell
+# Log out the default profile
+ve logout
+
+# Log out a specific profile
+ve logout -p dev
+
+# Log out all Console Login profiles in the current configuration
+ve logout --all
+```
+
+This command clears the local login state created by `ve login`. It removes locally cached credentials and clears the profile's `login-session`; it does not delete the profile or send a logout request to the server.
+
+Parameters:
+- `--profile, -p`: configuration profile name; defaults to `default`
+- `--all`: clear all `console-login` profiles in the current configuration; ignores `--profile`
+
+Notes:
+- `ve logout` without `--profile` only handles the `default` profile; it does not automatically log out `current`
+- This command only applies to `console-login` profiles; AK/SSO profiles are not affected
+- Run `ve login` again when you need to use Console Login credentials after logout
+
 #### Configure Auto-Completion
 
 By executing ve completion --help, users can view the methods for configuring auto-completion in various terminals. Based on the instructions provided, users may choose whether to configure the auto-completion feature.

README.MD

@@ -313,6 +313,72 @@ ve sso logout
 - Scopes 应该怎么填？
   通常可以省略，默认使用 `cloudidentity:account:access,offline_access`。如果手动填写，只允许 `cloudidentity:account:access` 和 `offline_access`，CLI 会自动去重并校验。
 
+#### Console 登录 (login)
+
+```shell
+# 使用默认 profile 登录，未指定 region 时会提示输入
+ve login
+
+# 推荐：指定 profile 和地域，profile/region 支持 -p/-r 简写
+ve login -p dev -r cn-beijing
+
+# 无浏览器、远程服务器或容器环境使用跨设备登录
+ve login -p dev -r cn-beijing --remote
+```
+
+该命令通过火山引擎控制台完成 OAuth 2.0 + PKCE 登录，并将临时 STS 凭证缓存到本地，后续业务命令可复用该 profile 的临时凭证。
+
+参数说明：
+- `--profile, -p`：配置名称，默认 `default`
+- `--region, -r`：地域；未指定时会提示输入，直接回车使用 `cn-beijing`
+- `--remote`：跨设备登录；按终端输出的 URL 在浏览器完成登录，并将浏览器展示的授权码完整粘贴回终端
+- `--endpoint-url`：登录服务地址，默认 `https://signin.volcengine.com`，通常无需修改
+
+注意事项：
+- 登录成功后，profile 会被写为 `console-login` 模式，并记录 `login-session`
+- 使用非 `default` profile 登录后，业务命令不会自动切换 profile；需要先执行 `ve configure profile --profile dev`
+- 本机浏览器无法回跳 CLI 所在机器时，使用 `--remote`
+
+完整使用流程示例：
+
+```shell
+# 1. 登录并写入 dev profile
+ve login --profile dev --region cn-beijing
+
+# 2. 如果 dev 不是当前默认 profile，先切换当前使用的配置
+ve configure profile --profile dev
+
+# 3. 执行业务命令时会使用当前 profile 中的 console-login 临时凭证
+ve ecs DescribeInstances
+
+# 4. 使用结束后清理本地登录状态
+ve logout --profile dev
+```
+
+#### Console 登出 (logout)
+
+```shell
+# 登出 default profile
+ve logout
+
+# 登出指定 profile
+ve logout -p dev
+
+# 登出当前配置中的所有 Console Login profile
+ve logout --all
+```
+
+该命令用于清理 `ve login` 建立的本地登录状态。它只删除本地缓存凭证并清除 profile 中的 `login-session`，不会删除 profile，也不会向服务端发起请求。
+
+参数说明：
+- `--profile, -p`：配置名称，默认 `default`
+- `--all`：清理当前配置中的所有 `console-login` profile；开启后忽略 `--profile`
+
+注意事项：
+- `ve logout` 不带 `--profile` 时只处理 `default` profile，不会自动按 `current` 登出
+- 只有 `console-login` profile 可使用该命令；AK/SSO profile 不适用
+- 登出后若需继续使用，重新执行 `ve login`
+
 #### 配置自动补全
 
 使用 ve completion --help 可以查看各种终端下配置自动补全的方式，用户可以根据提示信息自己选择是否配置自动补全功能
@@ -449,4 +515,3 @@ For vulnerability reporting and supported versions, see [SECURITY.md](SECURITY.m
 
 
 
-