feat(auth): add token info command (#8)

* feat(auth): add token info command

* fix(cmd): satisfy lint after plexgo upgrade

* fix(cmd): remove stale int conversions

* fix(cmd): remove remaining pointer conversions

* fix(cmd): remove quality pointer conversions

* fix(cmd): remove final pointer conversions

* chore(ci): trigger fresh workflow run

* fix(build): restore unmatched compatibility

* fix(auth): address token info review findings

* test(auth): add sanitized live Plex fixtures

Author: dogbertdev

AGENTS.md

@@ -0,0 +1,14 @@
+# Project Notes
+
+## Real-Response Test Fixtures
+
+- `internal/auth/testdata/plex_tv_user.json` and `internal/auth/testdata/plex_tv_resources.json` are sanitized fixtures derived from real Plex.tv responses captured on March 6, 2026.
+- These fixtures were shaped from local `.env` credentials during development and must not contain live tokens, private IPs, real email addresses, or other secrets.
+- When changing Plex auth/resource normalization in `internal/auth/plextv.go`, update the fixtures and the fixture-backed tests in `internal/auth/auth_test.go` to reflect real response shapes.
+- Prefer extending this fixture-based approach before adding broader mocks when validating Plex.tv schema changes.
+- Apply the same pattern anywhere the CLI depends on external Plex response shapes or other schema-sensitive integrations.
+- For relevant changes, prefer adding sanitized real-response fixtures plus normalization/output tests for:
+  - Plex.tv account, token, and resource payloads
+  - Plex server library, metadata, history, and stream payloads
+  - Command output that flattens or reformats external API responses
+- When a live response reveals a field shape the current tests do not cover, add or refresh fixtures in the nearest `testdata` directory as part of the change.

cmd/plex/main.go

@@ -184,6 +184,7 @@ func applyOutputFormat(cli *CLI, format string) {
 	cli.Watch.Stats.Output = format
 	cli.Cache.Clear.Output = format
 	cli.Auth.Servers.Output = format
+	cli.Auth.TokenInfo.Output = format
 }
 
 // loadConfig loads configuration from file and/or environment/cli flags

go.mod

@@ -3,7 +3,7 @@ module github.com/dogbertdev/plexcli
 go 1.22
 
 require (
-	github.com/LukeHagar/plexgo v0.27.0
+	github.com/LukeHagar/plexgo v0.28.2
 	github.com/alecthomas/kong v1.13.0
 	github.com/muesli/termenv v0.16.0
 	github.com/olekukonko/tablewriter v1.1.3

go.sum

@@ -1,5 +1,7 @@
 github.com/LukeHagar/plexgo v0.27.0 h1:Up/CObHhzoxwtVDZfpkJNcoLw98ZQ/mzHW/1f5JTVPs=
 github.com/LukeHagar/plexgo v0.27.0/go.mod h1:kxd/ulciB3OeABsxL2CYV0MsCEMi9etm8gX2c/thgn0=
+github.com/LukeHagar/plexgo v0.28.2 h1:eKugagPqzOuysMx/wpZxxBCd622aq0Xn+oInP1qZZWs=
+github.com/LukeHagar/plexgo v0.28.2/go.mod h1:kxd/ulciB3OeABsxL2CYV0MsCEMi9etm8gX2c/thgn0=
 github.com/alecthomas/assert/v2 v2.11.0 h1:2Q9r3ki8+JYXvGsDyBXwH3LcJ+WK5D0gc5E8vS6K3D0=
 github.com/alecthomas/assert/v2 v2.11.0/go.mod h1:Bze95FyfUr7x34QZrjL+XP+0qgp/zg8yS+TtBj1WA3k=
 github.com/alecthomas/kong v1.13.0 h1:5e/7XC3ugvhP1DQBmTS+WuHtCbcv44hsohMgcvVxSrA=

internal/auth/auth.go

@@ -85,27 +85,8 @@ func (t *TokenAuth) Authenticate(ctx context.Context) (string, error) {
 		return "", ErrNoCredentials
 	}
 
-	client := &http.Client{Timeout: DefaultTimeout}
-	req, err := http.NewRequestWithContext(ctx, "GET", PlexTVURL+"/user", nil)
-	if err != nil {
-		return "", fmt.Errorf("%w: %v", ErrInvalidToken, err)
-	}
-
-	req.Header.Set("Accept", "application/json")
-	req.Header.Set("X-Plex-Token", t.token)
-	req.Header.Set("X-Plex-Client-Identifier", DefaultClientID)
-	req.Header.Set("X-Plex-Product", DefaultProduct)
-	req.Header.Set("X-Plex-Version", DefaultVersion)
-	req.Header.Set("X-Plex-Platform", DefaultPlatform)
-
-	resp, err := client.Do(req)
-	if err != nil {
-		return "", fmt.Errorf("%w: %v", ErrInvalidToken, err)
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode != StatusOK {
-		return "", fmt.Errorf("%w: received status %d", ErrInvalidToken, resp.StatusCode)
+	if _, err := getTokenDetails(ctx, t.token); err != nil {
+		return "", err
 	}
 
 	return t.token, nil
@@ -358,44 +339,12 @@ func PollPINToken(ctx context.Context, pinID int64, clientID string, pollInterva
 }
 
 func DiscoverServers(ctx context.Context, token string) ([]ServerResource, error) {
-	if token == "" {
-		return nil, ErrNoCredentials
-	}
-
-	req, err := http.NewRequestWithContext(ctx, "GET", PlexTVURL+"/resources?includeHttps=1", nil)
+	resources, err := getServerResources(ctx, token)
 	if err != nil {
-		return nil, fmt.Errorf("%w: failed to create discover request: %v", ErrAuthFailed, err)
-	}
-	req.Header.Set("Accept", "application/json")
-	req.Header.Set("X-Plex-Token", token)
-	req.Header.Set("X-Plex-Client-Identifier", DefaultClientID)
-	req.Header.Set("X-Plex-Product", DefaultProduct)
-	req.Header.Set("X-Plex-Version", DefaultVersion)
-	req.Header.Set("X-Plex-Platform", DefaultPlatform)
-
-	resp, err := (&http.Client{Timeout: DefaultTimeout}).Do(req)
-	if err != nil {
-		return nil, fmt.Errorf("%w: failed to discover servers: %v", ErrAuthFailed, err)
-	}
-	defer resp.Body.Close()
-
-	if resp.StatusCode != StatusOK {
-		return nil, fmt.Errorf("%w: failed to discover servers (status %d)", ErrAuthFailed, resp.StatusCode)
-	}
-
-	var resources []ServerResource
-	if err := json.NewDecoder(resp.Body).Decode(&resources); err != nil {
-		return nil, fmt.Errorf("%w: failed to decode server resources: %v", ErrAuthFailed, err)
-	}
-
-	servers := make([]ServerResource, 0, len(resources))
-	for _, resource := range resources {
-		if strings.Contains(resource.Product, "Plex Media Server") {
-			servers = append(servers, resource)
-		}
+		return nil, err
 	}
 
-	return servers, nil
+	return normalizeServerResources(resources), nil
 }
 
 func PreferredServerURI(server ServerResource, preferLocal bool) (string, bool) {