id,page,ref,title,content,breadcrumbs,references
authentication:authentication-cli-create-token,authentication,authentication-cli-create-token,datasette create-token,"You can also create tokens on the command line using the  datasette create-token  command. 
                 This command takes one required argument - the ID of the actor to be associated with the created token. 
                 You can specify a  -e/--expires-after  option in seconds. If omitted, the token will never expire. 
                 The command will sign the token using the  DATASETTE_SECRET  environment variable, if available. You can also pass the secret using the  --secret  option. 
                 This means you can run the command locally to create tokens for use with a deployed Datasette instance, provided you know that instance's secret. 
                 To create a token for the  root  actor that will expire in one hour: 
                 datasette create-token root --expires-after 3600 
                 To create a token that never expires using a specific secret: 
                 datasette create-token root --secret my-secret-goes-here","[""Authentication and permissions"", ""API Tokens""]",[]
cli-reference:cli-help-create-token-help,cli-reference,cli-help-create-token-help,datasette create-token,"Create a signed API token, see  datasette create-token . 
             [[[cog
help([""create-token"", ""--help""]) 
             ]]] 
             Usage: datasette create-token [OPTIONS] ID

  Create a signed API token for the specified actor ID

  Example:

      datasette create-token root --secret mysecret

  To allow only ""view-database-download"" for all databases:

      datasette create-token root --secret mysecret \
          --all view-database-download

  To allow ""create-table"" against a specific database:

      datasette create-token root --secret mysecret \
          --database mydb create-table

  To allow ""insert-row"" against a specific table:

      datasette create-token root --secret myscret \
          --resource mydb mytable insert-row

  Restricted actions can be specified multiple times using multiple --all,
  --database, and --resource options.

  Add --debug to see a decoded version of the token.

Options:
  --secret TEXT                   Secret used for signing the API tokens
                                  [required]
  -e, --expires-after INTEGER     Token should expire after this many seconds
  -a, --all ACTION                Restrict token to this action
  -d, --database DB ACTION        Restrict token to this action on this database
  -r, --resource DB RESOURCE ACTION
                                  Restrict token to this action on this database
                                  resource (a table, SQL view or named query)
  --debug                         Show decoded token
  --plugins-dir DIRECTORY         Path to directory containing custom plugins
  --help                          Show this message and exit. 
             [[[end]]]","[""CLI reference""]",[]