f6e7cabe60
Cline/ClinePass requests failed with HTTP 401 ("Please make sure you are using
the latest version of Cline and re-authenticate your Cline account", #3230 /
#2333 / #3644). `getClineAccessToken()` unconditionally prefixed every token
with `workos:`, which is correct for Cline OAuth access tokens (WorkOS JWTs)
but wrong for ClinePass API keys — those are opaque strings (e.g. `clp_…`)
that the API accepts only verbatim, so the `workos:`-prefixed value was
rejected.
Only prefix tokens that look like a WorkOS JWT (`eyJ…`); API keys and other
opaque tokens pass through untouched, and an existing `workos:` prefix is
never doubled.
Also register `clinepass` in the token-refresh handlers. ClinePass shares
Cline's WorkOS auth endpoints, but without the entry expired ClinePass OAuth
tokens were never rotated, so every request kept 401ing. Finally, list
`apikey` first in the ClinePass `authModes` (ClinePass is meant to be used
with an API key from app.cline.bot/settings/api-keys), and add an "Import
from /models" button that pulls the live Cline catalog into custom models.
45 lines
1.6 KiB
JavaScript
45 lines
1.6 KiB
JavaScript
import pkg from "../../package.json" with { type: "json" };
|
|
|
|
const APP_VERSION = pkg.version || "0.0.0";
|
|
|
|
export function getClineAccessToken(token) {
|
|
if (typeof token !== "string") return "";
|
|
const trimmed = token.trim();
|
|
if (!trimmed) return "";
|
|
if (trimmed.toLowerCase().startsWith("workos:")) return trimmed;
|
|
// Cline OAuth access tokens are WorkOS JWTs (base64url `eyJ…` header).
|
|
// ClinePass API keys (category "apikey", e.g. `clp_…`) are NOT JWTs and must
|
|
// be sent verbatim — prefixing them with `workos:` makes the Cline API reject
|
|
// the request with HTTP 401 ("Please make sure you're using the latest
|
|
// version of Cline and re-authenticate your Cline account.").
|
|
const isWorkOsJwt = /^eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/.test(trimmed);
|
|
return isWorkOsJwt ? `workos:${trimmed}` : trimmed;
|
|
}
|
|
|
|
export function getClineAuthorizationHeader(token) {
|
|
const accessToken = getClineAccessToken(token);
|
|
return accessToken ? `Bearer ${accessToken}` : "";
|
|
}
|
|
|
|
export function buildClineHeaders(token, extraHeaders = {}) {
|
|
const authorization = getClineAuthorizationHeader(token);
|
|
const headers = {
|
|
"HTTP-Referer": "https://cline.bot",
|
|
"X-Title": "Cline",
|
|
"User-Agent": `9Router/${APP_VERSION}`,
|
|
"X-PLATFORM": process.platform || "unknown",
|
|
"X-PLATFORM-VERSION": process.version || "unknown",
|
|
"X-CLIENT-TYPE": "9router",
|
|
"X-CLIENT-VERSION": APP_VERSION,
|
|
"X-CORE-VERSION": APP_VERSION,
|
|
"X-IS-MULTIROOT": "false",
|
|
...extraHeaders,
|
|
};
|
|
|
|
if (authorization) {
|
|
headers.Authorization = authorization;
|
|
}
|
|
|
|
return headers;
|
|
}
|