a simple role assumption service that exports resultant credentials the same way the ec2metadata service does, and provides endpoints for arbitrary metadata like in EC2 land.
don't spit an error on the console and then a less intellegible error on the website. Expose all errors directly.
one way this goes wonky is when the clock is off on the initial profile screen. exit status of the cli command isn't checked and so an invalid serial code is used on the next command, which fails and is displayed, saying bad serial, but since the serial was never entered, it's very confusing to the user.
don't spit an error on the console and then a less intellegible error on the website. Expose all errors directly.
one way this goes wonky is when the clock is off on the initial profile screen. exit status of the cli command isn't checked and so an invalid serial code is used on the next command, which fails and is displayed, saying bad serial, but since the serial was never entered, it's very confusing to the user.