glab auth
Manage GitLab CLI authentication.
Quick start
# Interactive login
glab auth login
# Check current auth status
glab auth status
# Login to different instance
glab auth login --hostname gitlab.company.com
# Logout
glab auth logout
Workflows
First-time setup
- Run
glab auth login - Choose authentication method (token or browser)
- Follow prompts for your GitLab instance
- Verify with
glab auth status
v1.89.0+: When connecting to a self-hosted GitLab instance,
glab auth loginnow prompts for the SSH hostname separately from the API hostname. This allows your SSH remote to use a different host than the API endpoint — useful when your company routes SSH and HTTPS traffic differently.Example: API hostname
gitlab.company.com, SSH hostnamessh.company.com
Switching accounts/instances
Logout from current:
glab auth logoutLogin to new instance:
glab auth login --hostname gitlab.company.comVerify:
glab auth status
Docker registry access
Configure Docker helper:
glab auth configure-dockerVerify Docker can authenticate:
docker login registry.gitlab.comPull private images:
docker pull registry.gitlab.com/group/project/image:tag
Troubleshooting
"401 Unauthorized" errors:
- Check status:
glab auth status - Verify token hasn't expired (check GitLab settings)
- Re-authenticate:
glab auth login
Multiple instances:
- Use
--hostnameflag to specify instance - Each instance maintains separate auth
Docker authentication fails:
- Re-run:
glab auth configure-docker - Check Docker config:
cat ~/.docker/config.json - Verify helper is set:
"credHelpers": { "registry.gitlab.com": "glab-cli" }
Subcommands
See references/commands.md for detailed flag documentation:
login- Authenticate with GitLab instancelogout- Log out of GitLab instancestatus- View authentication statusconfigure-docker- Configure Docker to use GitLab registrydocker-helper- Docker credential helperdpop-gen- Generate DPoP token
Related Skills
Initial setup:
- After authentication, see
glab-configto set CLI defaults - See
glab-ssh-keyfor SSH key management - See
glab-gpg-keyfor commit signing setup
Repository operations:
- See
glab-repofor cloning repositories - Authentication required before first clone/push