oh login
Signs you in through your browser, so commands run as you with no API key. The session renews itself for 30 days.
Your organization must have OAuth sign-in for the API turned on. oh login does not sign you in to an AI Gateway; for that, use oh ai-gateway login.
The profile still needs Account UID, Project UID, Region and Request ID (link UID), but no API key, API secret or User ID; oh-configure accepts those blank. While you are signed in, commands use your session instead of the profile's API key. oh logout switches back.
The refresh token is kept in your OS keychain. A machine with no keychain, such as headless Linux, keeps it in ~/.onehouse/sessions/ with mode 0600. Set ONEHOUSE_SESSION_STORE=file to force the file.
| Flag | Required | Description |
|---|---|---|
--port | No | Pin the local callback port, for an SSH port forward. Default: any free port. |
--no-browser | No | Print the sign-in URL instead of opening it. |
oh login
# On a remote machine over SSH: forward the port, then open the printed URL locally
oh login --port 8765 --no-browser
To sign out, run oh logout.