cmd/litcli: add session type flag to litcli

Add flag to litcli so that we can create sessions of the admin or
readonly macaroon type through the cli.
This commit also results in it no longer being possible to create a
UIPassword session through the CLI.

Author: ellemouton

cmd/litcli/sessions.go

@@ -50,6 +50,14 @@ var addSessionCommand = cli.Command{
 			Usage: "set to true to skip verification of the " +
 				"server's tls cert.",
 		},
+		cli.StringFlag{
+			Name: "type",
+			Usage: "session type to be created which will " +
+				"determine the permissions a user has when " +
+				"connecting with the session. Options " +
+				"include readonly|admin",
+			Value: "readonly",
+		},
 	},
 }
 
@@ -65,13 +73,19 @@ func addSession(ctx *cli.Context) error {
 		return fmt.Errorf("must set a label for the session")
 	}
 
+	sessTypeStr := ctx.String("type")
+	sessType, err := parseSessionType(sessTypeStr)
+	if err != nil {
+		return err
+	}
+
 	sessionLength := time.Second * time.Duration(ctx.Uint64("expiry"))
 	sessionExpiry := time.Now().Add(sessionLength).Unix()
 
 	resp, err := client.AddSession(
 		getAuthContext(ctx), &litrpc.AddSessionRequest{
 			Label:                  label,
-			SessionType:            litrpc.SessionType_TYPE_UI_PASSWORD,
+			SessionType:            sessType,
 			ExpiryTimestampSeconds: uint64(sessionExpiry),
 			MailboxServerAddr:      ctx.String("mailboxserveraddr"),
 			DevServer:              ctx.Bool("devserver"),
@@ -86,6 +100,17 @@ func addSession(ctx *cli.Context) error {
 	return nil
 }
 
+func parseSessionType(sessionType string) (litrpc.SessionType, error) {
+	switch sessionType {
+	case "admin":
+		return litrpc.SessionType_TYPE_MACAROON_ADMIN, nil
+	case "readonly":
+		return litrpc.SessionType_TYPE_MACAROON_READONLY, nil
+	default:
+		return 0, fmt.Errorf("unsupported session type %s", sessionType)
+	}
+}
+
 var listSessionCommand = cli.Command{
 	Name:        "list",
 	ShortName:   "l",