cat-shark/pi-commandcode-provider
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

style: configure prettier (no semicolons, trailing commas)

Browse Source
This commit is contained in:
Patrick Wozniak
2026-05-05 14:02:41 +02:00
parent e9853eb4a4
commit af2b316d84
14 changed files with 1247 additions and 1446 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/oauth.ts
+25 -30
View File
@@ -12,25 +12,25 @@
* OAuth credentials with a far-future expiry.
*/
import { randomBytes } from "node:crypto";
import { startAuthServer } from "./auth-server.ts";
import { randomBytes } from "node:crypto"
import { startAuthServer } from "./auth-server.ts"
const STUDIO_BASE_URL = "https://commandcode.ai";
const TEN_YEARS_MS = 10 * 365 * 24 * 60 * 60 * 1000; // API keys don't expire
const STUDIO_BASE_URL = "https://commandcode.ai"
const TEN_YEARS_MS = 10 * 365 * 24 * 60 * 60 * 1000 // API keys don't expire
export interface OAuthLoginCallbacks {
onAuth(params: { url: string }): void;
onPrompt(params: { message: string }): Promise<string>;
onAuth(params: { url: string }): void
onPrompt(params: { message: string }): Promise<string>
}
export interface OAuthCredentials {
refresh: string;
access: string;
expires: number;
refresh: string
access: string
expires: number
}
function generateStateToken(): string {
return randomBytes(32).toString("base64url");
return randomBytes(32).toString("base64url")
}
/**
@@ -39,32 +39,29 @@ function generateStateToken(): string {
* Returns OAuth credentials where access == refresh == the user's API key.
* The keys don't expire, so we set a far-future expiry.
*/
export async function login(
callbacks: OAuthLoginCallbacks,
): Promise<OAuthCredentials> {
const authServer = await startAuthServer();
const stateToken = generateStateToken();
export async function login(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials> {
const authServer = await startAuthServer()
const stateToken = generateStateToken()
const authUrl = `${STUDIO_BASE_URL}/studio/auth/cli?callback=${encodeURIComponent(`http://localhost:${authServer.port}/callback`)}&state=${encodeURIComponent(stateToken)}`;
const authUrl = `${STUDIO_BASE_URL}/studio/auth/cli?callback=${encodeURIComponent(`http://localhost:${authServer.port}/callback`)}&state=${encodeURIComponent(stateToken)}`
// Tell pi to open the browser
callbacks.onAuth({ url: authUrl });
callbacks.onAuth({ url: authUrl })
// Wait for the Command Code Studio to POST the API key back
let callback: { apiKey: string; state: string };
let callback: { apiKey: string; state: string }
try {
callback = await authServer.waitForCallback;
callback = await authServer.waitForCallback
} catch (error) {
// Clean up server on error
authServer.server.close();
throw error;
authServer.server.close()
throw error
}
// Validate state token to prevent CSRF
if (callback.state !== stateToken) {
throw new Error(
"State token mismatch. Authentication may have been tampered with.",
);
authServer.server.close()
throw new Error("State token mismatch. Authentication may have been tampered with.")
}
// Return as OAuth credentials. Since CC API keys don't expire,
@@ -73,26 +70,24 @@ export async function login(
refresh: callback.apiKey,
access: callback.apiKey,
expires: Date.now() + TEN_YEARS_MS,
};
}
}
/**
* Command Code API keys don't expire, so "refresh" is a no-op.
* Returns the same credentials with an updated far-future expiry.
*/
export async function refreshToken(
credentials: OAuthCredentials,
): Promise<OAuthCredentials> {
export async function refreshToken(credentials: OAuthCredentials): Promise<OAuthCredentials> {
return {
refresh: credentials.refresh,
access: credentials.access,
expires: Date.now() + TEN_YEARS_MS,
};
}
}
/**
* Returns the access token (API key) from OAuth credentials.
*/
export function getApiKey(credentials: OAuthCredentials): string {
return credentials.access;
return credentials.access
}