Skip to content

gplay auth login

Register a Google Cloud service account JSON as a named Account in the local gplay registry and mark it active so subsequent commands use it without an explicit --account flag.

The credential is stored in the OS keystore (macOS Keychain, Windows Credential Manager, or Linux Secret Service). On systems without a keystore daemon (headless Linux, CI containers), gplay transparently falls back to a 0600 file under the config directory. The active backend is reported by gplay auth status and logged once per process at -v.

Pass --activate=false to add a second Account without changing which one is active. (The very first registered Account becomes active regardless, so the registry is never left without one when --activate=false is set.)

gplay auth login [flags]
FlagDescription
--activatemark the new Account active (default true) (default true)
--developer-id gplay teamPlay Console Developer account id to record on this Account (for gplay team)
--name stringfriendly Account name (default: derived from client_email)
FlagDescription
--account stringname of a stored Account to use (overrides env and active Account)
--retry intretry transient failures (transport errors, 5xx, 429) up to N times with exponential backoff (default: 0, no retry)
--service-account stringpath to a service-account JSON, or inline JSON content (overrides --account, env, and active Account)
--timeout durationper-request API timeout, e.g. 30s or 2m (default: 60s for control-plane calls, none for uploads)
-v, --verboselog flow steps to stderr (info level)