config auth¶

aeat config auth apoderado check¶

Verify against AEAT (unavailable; live reads are sealed). Use ‘status’ for the offline read.

Parameters

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth apoderado clear¶

Retire the apoderado configuration

Parameters

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth apoderado configure¶

Set active apoderado configuration

Parameters

--represented-nif: NIF of the represented party Option, optional.
--scope: Scope tokens (can be repeated) Option, optional.

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth apoderado scopes list¶

List accepted apoderado scopes

Parameters

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth apoderado status¶

Show active apoderado configuration

Parameters

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth certificate check¶

Check expiry and rotation health for every registered certificate source

Parameters

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth certificate list¶

List every registered certificate source

Parameters

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth certificate register¶

Parameters

--name: Identifier for this certificate source (for example, personal or apoderado-acme) Option, required.
--file: Path to the PKCS#12 (.p12/.pfx) bundle Option, required.
--friendly-name: Optional human-readable label distinct from –name Option, optional.

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth certificate remove¶

Remove a registered certificate source

Parameters

--name: Registered certificate source to remove Option, required.

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth certificate secret remove¶

Remove the passphrase bound to a registered certificate source

Parameters

--name: Registered certificate source whose passphrase should be removed Option, required.

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth certificate secret set¶

Set (or rotate) the passphrase for a registered certificate source

Parameters

--name: Registered certificate source the passphrase is bound to Option, required.
--secrets-stdin: Read the secrets as one bounded JSON object from standard input instead of prompting. Option, optional.
--secrets-fd: File descriptor to read machine secrets from. Option, optional.

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth certificate select¶

Select the active certificate source

Parameters

--name: Registered certificate source to activate Option, required.

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth configure¶

Configure the active authentication provider

Parameters

--provider: Authentication provider id (e.g. certificado-electronico) Option, required.
--file: Path to the credential file (certificate or key) Option, optional.

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth diagnostics list¶

List encrypted Cl@ve auth diagnostics.

Parameters

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth diagnostics report¶

Record the operator-observed Cl@ve app state for one auth diagnostic.

Parameters

diagnostic_id: Diagnostic id. Argument, required.

--phone-state: One of: app_prompted_and_accepted, app_prompted_not_accepted, app_did_not_prompt, operator_did_not_check. Option, required.

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth diagnostics view¶

Show one encrypted auth diagnostic by its identifier, with sensitive bodies redacted.

Parameters

diagnostic_id: Diagnostic id. Argument, required.
–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth login¶

Acquire or verify a live AEAT session

Parameters

--provider: Authentication provider id (e.g. certificado-electronico) Option, optional.
--fresh: Force a new live authentication instead of reusing a saved AEAT session Option, optional.
--reset-lock: Clear a stale auth acquisition lock before starting Option, optional.

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth logout¶

End local authentication sessions without removing provider configuration

Parameters

--provider: Authentication provider id (e.g. certificado-electronico) Option, optional.
--all: End sessions for every known authentication provider Option, optional.

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth providers¶

List supported authentication providers

Parameters

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth reset¶

Remove local provider configuration, sessions, locks, certificate registrations, and stored certificate secrets

Parameters

--provider: Authentication provider id (e.g. certificado-electronico) Option, optional.
--all: Reset every known authentication provider Option, optional.
--yes: Confirm the destructive authentication reset Option, optional.

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth status¶

Show configured authentication state

Parameters

--provider: Authentication provider id (e.g. certificado-electronico) Option, optional.

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.

aeat config auth test¶

Check local authentication readiness

Parameters

--provider: Authentication provider id (e.g. certificado-electronico) Option, optional.

–output-language / –language: Output language for the response text (es, en, ca, hu). Option, optional.