Accept a token instead of a full URL

The CLI now stores just the 32-character token from a Custom source on pingrb.com and constructs the webhook URL itself when sending. URLs (or anything containing a slash/whitespace) are rejected with a helpful error.

Existing v0.1.0 users will see a migration message on next ping prompting them to re-run `pingrb config <token>`.

A new PINGRB_HOST env var overrides the base URL (defaults to https://pingrb.com), useful for tests and any future non-production instance.

This is a breaking change in the config file format, so the next tagged release should be v0.2.0.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: joemasilotti

README.md

@@ -17,17 +17,21 @@ go install github.com/ruby-native/pingrb-cli@latest
 ## Usage
 
 ```sh
-pingrb config https://pingrb.com/webhooks/custom/<your-token>
+pingrb config <your-token>
 pingrb "deploy failed"
 pingrb "job done" --body "backfill finished" --url https://example.com/jobs/42
 some-long-job && pingrb "$?" --body "done"
 ```
 
-The webhook URL is the Custom source URL from your account at https://pingrb.com.
+Get the token from your Custom source on https://pingrb.com (it's the last
+segment of the webhook URL).
 
 Config is stored at the platform's standard user config dir
 (`~/.config/pingrb` on Linux, `~/Library/Application Support/pingrb` on macOS).
 
+Set `PINGRB_HOST` to point at a non-production instance (defaults to
+`https://pingrb.com`).
+
 ## Develop
 
 ```sh

main.go

@@ -15,16 +15,18 @@ import (
 
 var version = "dev"
 
+const defaultHost = "https://pingrb.com"
+
 const usage = `pingrb sends a push notification to your phone.
 
 Usage:
-  pingrb config <url>    set the webhook URL from your pingrb Custom source
-  pingrb config          print the configured URL
+  pingrb config <token>    save your Custom source token from pingrb.com
+  pingrb config            print the saved token
   pingrb <title> [--body BODY] [--url URL]
-                         send a push
+                           send a push
 
 Examples:
-  pingrb config https://pingrb.com/webhooks/custom/abc123
+  pingrb config abc123def456...
   pingrb "deploy failed"
   pingrb "job done" --body "backfill finished" --url https://example.com/jobs/42
 `
@@ -56,15 +58,15 @@ func run(args []string, stdout io.Writer) error {
 
 func runConfig(args []string, stdout io.Writer) error {
 	if len(args) == 0 {
-		url, err := readConfig()
+		token, err := readConfig()
 		if err != nil {
 			return err
 		}
-		fmt.Fprintln(stdout, url)
+		fmt.Fprintln(stdout, token)
 		return nil
 	}
 	if len(args) > 1 {
-		return errors.New("config takes at most one URL argument")
+		return errors.New("config takes at most one token argument")
 	}
 	if err := writeConfig(args[0]); err != nil {
 		return err
@@ -87,11 +89,11 @@ func runPing(args []string) error {
 		return err
 	}
 
-	endpoint, err := readConfig()
+	token, err := readConfig()
 	if err != nil {
 		return err
 	}
-	return sendPing(endpoint, title, *body, *url)
+	return sendPing(token, title, *body, *url)
 }
 
 func configPath() (string, error) {
@@ -110,26 +112,44 @@ func readConfig() (string, error) {
 	data, err := os.ReadFile(path)
 	if err != nil {
 		if errors.Is(err, os.ErrNotExist) {
-			return "", errors.New("not configured. Run `pingrb config <url>`.")
+			return "", errors.New("not configured. Run `pingrb config <token>`.")
 		}
 		return "", err
 	}
-	url := strings.TrimSpace(string(data))
-	if url == "" {
-		return "", errors.New("config is empty. Run `pingrb config <url>`.")
+	token := strings.TrimSpace(string(data))
+	if token == "" {
+		return "", errors.New("config is empty. Run `pingrb config <token>`.")
+	}
+	if strings.ContainsAny(token, "/ \t") {
+		return "", errors.New("config looks like a URL (pre-0.2.0 format). Re-run `pingrb config <token>` with just the token.")
 	}
-	return url, nil
+	return token, nil
 }
 
-func writeConfig(url string) error {
+func writeConfig(input string) error {
+	token := strings.TrimSpace(input)
+	if token == "" {
+		return errors.New("token cannot be empty")
+	}
+	if strings.ContainsAny(token, "/ \t") {
+		return errors.New("expected a token, not a URL or path. Copy the 32-character token from your Custom source on pingrb.com.")
+	}
+
 	path, err := configPath()
 	if err != nil {
 		return err
 	}
 	if err := os.MkdirAll(filepath.Dir(path), 0o755); err != nil {
 		return err
 	}
-	return os.WriteFile(path, []byte(url+"\n"), 0o600)
+	return os.WriteFile(path, []byte(token+"\n"), 0o600)
+}
+
+func host() string {
+	if v := strings.TrimSpace(os.Getenv("PINGRB_HOST")); v != "" {
+		return strings.TrimRight(v, "/")
+	}
+	return defaultHost
 }
 
 type pingPayload struct {
@@ -138,11 +158,12 @@ type pingPayload struct {
 	URL   string `json:"url,omitempty"`
 }
 
-func sendPing(endpoint, title, body, url string) error {
+func sendPing(token, title, body, url string) error {
 	data, err := json.Marshal(pingPayload{Title: title, Body: body, URL: url})
 	if err != nil {
 		return err
 	}
+	endpoint := host() + "/webhooks/custom/" + token
 	resp, err := http.Post(endpoint, "application/json", bytes.NewReader(data))
 	if err != nil {
 		return err

main_test.go

@@ -6,6 +6,8 @@ import (
 	"io"
 	"net/http"
 	"net/http/httptest"
+	"os"
+	"path/filepath"
 	"strings"
 	"testing"
 )
@@ -17,22 +19,62 @@ func isolateConfig(t *testing.T) {
 	t.Setenv("XDG_CONFIG_HOME", dir)
 }
 
+const testToken = "abc123testtoken"
+
 func TestConfigRoundTrip(t *testing.T) {
 	isolateConfig(t)
 
-	if err := run([]string{"config", "https://example.com/webhook"}, io.Discard); err != nil {
+	if err := run([]string{"config", testToken}, io.Discard); err != nil {
 		t.Fatal(err)
 	}
 
 	var out bytes.Buffer
 	if err := run([]string{"config"}, &out); err != nil {
 		t.Fatal(err)
 	}
-	if got := strings.TrimSpace(out.String()); got != "https://example.com/webhook" {
+	if got := strings.TrimSpace(out.String()); got != testToken {
 		t.Errorf("got %q", got)
 	}
 }
 
+func TestConfigRejectsURL(t *testing.T) {
+	isolateConfig(t)
+
+	err := run([]string{"config", "https://pingrb.com/webhooks/custom/abc123"}, io.Discard)
+	if err == nil || !strings.Contains(err.Error(), "expected a token") {
+		t.Errorf("got %v", err)
+	}
+}
+
+func TestConfigRejectsEmpty(t *testing.T) {
+	isolateConfig(t)
+
+	err := run([]string{"config", "   "}, io.Discard)
+	if err == nil || !strings.Contains(err.Error(), "empty") {
+		t.Errorf("got %v", err)
+	}
+}
+
+func TestReadRejectsLegacyURLConfig(t *testing.T) {
+	isolateConfig(t)
+
+	path, err := configPath()
+	if err != nil {
+		t.Fatal(err)
+	}
+	if err := os.MkdirAll(filepath.Dir(path), 0o755); err != nil {
+		t.Fatal(err)
+	}
+	if err := os.WriteFile(path, []byte("https://pingrb.com/webhooks/custom/abc\n"), 0o600); err != nil {
+		t.Fatal(err)
+	}
+
+	err = run([]string{"deploy failed"}, io.Discard)
+	if err == nil || !strings.Contains(err.Error(), "pre-0.2.0") {
+		t.Errorf("got %v", err)
+	}
+}
+
 func TestPingNotConfigured(t *testing.T) {
 	isolateConfig(t)
 
@@ -46,7 +88,9 @@ func TestPingPostsJSON(t *testing.T) {
 	isolateConfig(t)
 
 	var got pingPayload
+	var gotPath string
 	srv := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		gotPath = r.URL.Path
 		if ct := r.Header.Get("Content-Type"); ct != "application/json" {
 			t.Errorf("Content-Type %q", ct)
 		}
@@ -56,8 +100,9 @@ func TestPingPostsJSON(t *testing.T) {
 		w.WriteHeader(http.StatusAccepted)
 	}))
 	defer srv.Close()
+	t.Setenv("PINGRB_HOST", srv.URL)
 
-	if err := run([]string{"config", srv.URL}, io.Discard); err != nil {
+	if err := run([]string{"config", testToken}, io.Discard); err != nil {
 		t.Fatal(err)
 	}
 	if err := run([]string{"job done", "--body", "backfill finished", "--url", "https://example.com/jobs/42"}, io.Discard); err != nil {
@@ -66,6 +111,9 @@ func TestPingPostsJSON(t *testing.T) {
 	if got.Title != "job done" || got.Body != "backfill finished" || got.URL != "https://example.com/jobs/42" {
 		t.Errorf("got %+v", got)
 	}
+	if want := "/webhooks/custom/" + testToken; gotPath != want {
+		t.Errorf("path = %q, want %q", gotPath, want)
+	}
 }
 
 func TestPingOmitsEmptyFields(t *testing.T) {
@@ -77,8 +125,9 @@ func TestPingOmitsEmptyFields(t *testing.T) {
 		w.WriteHeader(http.StatusAccepted)
 	}))
 	defer srv.Close()
+	t.Setenv("PINGRB_HOST", srv.URL)
 
-	if err := run([]string{"config", srv.URL}, io.Discard); err != nil {
+	if err := run([]string{"config", testToken}, io.Discard); err != nil {
 		t.Fatal(err)
 	}
 	if err := run([]string{"deploy failed"}, io.Discard); err != nil {
@@ -100,8 +149,9 @@ func TestPingErrorsOnNon2xx(t *testing.T) {
 		_, _ = io.WriteString(w, "source not found")
 	}))
 	defer srv.Close()
+	t.Setenv("PINGRB_HOST", srv.URL)
 
-	if err := run([]string{"config", srv.URL}, io.Discard); err != nil {
+	if err := run([]string{"config", testToken}, io.Discard); err != nil {
 		t.Fatal(err)
 	}
 	err := run([]string{"deploy failed"}, io.Discard)