fix(hc): Adds support for region URL overrides in CLI

src/config.rs

@@ -66,12 +66,17 @@ impl Config {
             .map(|td| td.url.as_str())
             .unwrap_or_default();
 
-        let url = match (default_url.as_str(), token_url) {
-            (_, "") => default_url,
-            _ if default_url == token_url => default_url,
-            (DEFAULT_URL | "", _) => String::from(token_url),
+        let region_url = token_embedded_data
+            .as_ref()
+            .map(|td| td.region_url.as_str())
+            .unwrap_or_default();
+
+        let url = match (default_url.as_str(), token_url, region_url) {
+            (_, "", "") => default_url,
+            _ if default_url == token_url || default_url == region_url => default_url,
+            (DEFAULT_URL | "", _, _) => String::from(token_url),
             _ => bail!(
-                "Two different url values supplied: `{token_url}` (from token), `{default_url}`."
+                "URL must match one of the provided URLs on the authentication token: `{token_url}` or `{region_url}`, received: `{default_url}`."
             ),
         };
 
@@ -210,8 +215,14 @@ impl Config {
             .map(|td| td.url.as_str())
             .unwrap_or_default();
 
-        if !token_url.is_empty() && url != token_url {
-            bail!("Two different url values supplied: `{token_url}` (from token), `{url}`.");
+        let region_url = self
+            .cached_token_data
+            .as_ref()
+            .map(|td| td.region_url.as_str())
+            .unwrap_or_default();
+
+        if !token_url.is_empty() && url != token_url && url != region_url {
+            bail!("URL must match one of the provided URLs on the authentication token: `{token_url}` or `{region_url}`, received: `{url}`.")
         }
 
         self.cached_base_url = url.to_owned();

src/utils/auth_token/org_auth_token.rs

@@ -16,7 +16,7 @@ pub struct OrgAuthToken {
 #[allow(dead_code)] // Otherwise, we get a warning about unused fields
 pub struct AuthTokenPayload {
     iat: f64,
-    region_url: String,
+    pub region_url: String,
     pub org: String,
 
     // URL may be missing from some old auth tokens, see getsentry/sentry#57123

tests/integration/_cases/org_tokens/url-match.trycmd

@@ -1,11 +1,9 @@
 ```
-$ sentry-cli --auth-token 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 --url http://localhost:8000 sourcemaps upload
+$ sentry-cli --auth-token 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 --url http://localhost:8000 sourcemaps upload --org nomatch  test_path
 ? failed
-error: the following required arguments were not provided:
-  <PATHS>...
+error: Two different org values supplied: `sentry` (from token), `nomatch`.
 
-Usage: sentry-cli[EXE] sourcemaps upload <PATHS>...
-
-For more information, try '--help'.
+Add --log-level=[info|debug] or export SENTRY_LOG_LEVEL=[info|debug] to see more output.
+Please attach the full debug log to all bug reports.
 
 ```

tests/integration/_cases/org_tokens/url-mismatch.trycmd

@@ -1,7 +1,7 @@
 ```
-$ sentry-cli --auth-token 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 --url http://example.com sourcemaps upload test_path
+$ sentry-cli --auth-token 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 --url http://example.com sourcemaps upload test_path
 ? failed
-error: Two different url values supplied: `http://localhost:8000` (from token), `http://example.com`.
+error: URL must match one of the provided URLs on the authentication token: `http://localhost:8000` or `http://region.localhost:8000`, received: `http://example.com`.
 
 Add --log-level=[info|debug] or export SENTRY_LOG_LEVEL=[info|debug] to see more output.
 Please attach the full debug log to all bug reports.

tests/integration/_cases/org_tokens/url-region-match.trycmd

@@ -0,0 +1,9 @@
+```
+$ sentry-cli --auth-token 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 --url http://region.localhost:8000 sourcemaps upload --org nomatch test_path
+? failed
+error: Two different org values supplied: `sentry` (from token), `nomatch`.
+
+Add --log-level=[info|debug] or export SENTRY_LOG_LEVEL=[info|debug] to see more output.
+Please attach the full debug log to all bug reports.
+
+```

tests/integration/org_tokens.rs

@@ -15,6 +15,11 @@ fn org_token_url_match() {
     register_test("org_tokens/url-match.trycmd");
 }
 
+#[test]
+fn org_token_region_url_match() {
+    register_test("org_tokens/url-region-match.trycmd");
+}
+
 #[test]
 fn org_token_org_match() {
     register_test("org_tokens/org-match.trycmd");