- zed live model discovery; codebuddy-intl handler; remove duplicate workbuddy - split oauth providers.js into per-provider files (facade re-export) - fold 5 standard refresh providers into config-driven generic - hide trae/windsurf from registry (no tool calling support) - fix login-CSRF + SSRF on trae/windsurf/zed local callback proxies via loopback-origin guard + strict state validation + apiOrigins allowlist - move zed RSA private key transit to POST body; redact proxy logs Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
86 lines
2.5 KiB
JavaScript
86 lines
2.5 KiB
JavaScript
import { GEMINI_CONFIG, getOAuthClientMetadata } from "../constants/oauth.js";
|
|
|
|
const geminiCli = {
|
|
config: GEMINI_CONFIG,
|
|
flowType: "authorization_code",
|
|
buildAuthUrl: (config, redirectUri, state) => {
|
|
const params = new URLSearchParams({
|
|
client_id: config.clientId,
|
|
response_type: "code",
|
|
redirect_uri: redirectUri,
|
|
scope: config.scopes.join(" "),
|
|
state: state,
|
|
access_type: "offline",
|
|
prompt: "consent",
|
|
});
|
|
return `${config.authorizeUrl}?${params.toString()}`;
|
|
},
|
|
exchangeToken: async (config, code, redirectUri) => {
|
|
const response = await fetch(config.tokenUrl, {
|
|
method: "POST",
|
|
headers: {
|
|
"Content-Type": "application/x-www-form-urlencoded",
|
|
Accept: "application/json",
|
|
},
|
|
body: new URLSearchParams({
|
|
grant_type: "authorization_code",
|
|
client_id: config.clientId,
|
|
client_secret: config.clientSecret,
|
|
code: code,
|
|
redirect_uri: redirectUri,
|
|
}),
|
|
});
|
|
|
|
if (!response.ok) {
|
|
const error = await response.text();
|
|
throw new Error(`Token exchange failed: ${error}`);
|
|
}
|
|
|
|
return await response.json();
|
|
},
|
|
postExchange: async (tokens) => {
|
|
// Fetch user info
|
|
const userInfoRes = await fetch(`${GEMINI_CONFIG.userInfoUrl}?alt=json`, {
|
|
headers: { Authorization: `Bearer ${tokens.access_token}` },
|
|
});
|
|
const userInfo = userInfoRes.ok ? await userInfoRes.json() : {};
|
|
|
|
// Fetch project ID
|
|
let projectId = "";
|
|
try {
|
|
const projectRes = await fetch(
|
|
"https://cloudcode-pa.googleapis.com/v1internal:loadCodeAssist",
|
|
{
|
|
method: "POST",
|
|
headers: {
|
|
Authorization: `Bearer ${tokens.access_token}`,
|
|
"Content-Type": "application/json",
|
|
},
|
|
body: JSON.stringify({
|
|
metadata: getOAuthClientMetadata(),
|
|
mode: 1,
|
|
}),
|
|
}
|
|
);
|
|
if (projectRes.ok) {
|
|
const data = await projectRes.json();
|
|
projectId = data.cloudaicompanionProject?.id || data.cloudaicompanionProject || "";
|
|
}
|
|
} catch (e) {
|
|
console.log("Failed to fetch project ID:", e);
|
|
}
|
|
|
|
return { userInfo, projectId };
|
|
},
|
|
mapTokens: (tokens, extra) => ({
|
|
accessToken: tokens.access_token,
|
|
refreshToken: tokens.refresh_token,
|
|
expiresIn: tokens.expires_in,
|
|
scope: tokens.scope,
|
|
email: extra?.userInfo?.email,
|
|
projectId: extra?.projectId,
|
|
}),
|
|
};
|
|
|
|
export default geminiCli;
|