easyai 1.0.2 → 1.0.3

data/lib/easyai/auth/authclaude.rb

@@ -0,0 +1,440 @@
+require 'json'
+require 'etc'
+require 'open3'
+require 'fileutils'
+
+module EasyAI
+  module Auth
+    class AuthClaude
+      def self.configure(config, user_name = nil)
+        return false unless config
+        
+        # 检查认证配置优先级
+        is_macos = RUBY_PLATFORM.include?('darwin')
+        keychain_exists = is_macos && config["key_chain"] && config["key_chain"]["claudeAiOauth"] && config["key_chain"]["service_name"]
+        env_token_exists = config["env"] && config["env"]["CLAUDE_CODE_OAUTH_TOKEN"]
+        
+        # 如果使用 Keychain，需要将令牌从 Keychain 读取到配置中
+        if keychain_exists
+          token_from_keychain = get_token_from_keychain(config["key_chain"]["service_name"])
+          if token_from_keychain
+            config["env"] ||= {}
+            config["env"]["CLAUDE_CODE_OAUTH_TOKEN"] = token_from_keychain
+          end
+        end
+        
+        # 根据优先级确定认证方法
+        if keychain_exists
+          configure_keychain(config)
+          clean_env_variables
+        elsif env_token_exists
+          verify_token_config(config)
+          clean_keychain if is_macos
+        else
+          token = prompt_for_token
+          return false if token.nil? || token.empty?
+          
+          # 将令牌添加到配置中进行处理
+          config["env"] ||= {}
+          config["env"]["CLAUDE_CODE_OAUTH_TOKEN"] = token
+          
+          verify_token_config(config)
+          clean_keychain
+        end
+        
+        # 更新 ~/.claude.json 文件
+        update_claude_json(config) if config["claude_json"]
+        
+        # 配置代理设置
+        configure_proxy(config) if config["claude_proxy"]
+        
+        true
+      end
+      
+      private
+      
+      def self.get_token_from_keychain(service_name)
+        return nil unless RUBY_PLATFORM.include?('darwin')
+        
+        account_name = Etc.getlogin || ENV['USER'] || ENV['LOGNAME']
+        
+        cmd = [
+          "security",
+          "find-generic-password",
+          "-a", account_name,
+          "-s", service_name,
+          "-w"
+        ]
+        
+        begin
+          stdout, stderr, status = Open3.capture3(*cmd)
+          
+          if status.success? && !stdout.strip.empty?
+            # 解析 JSON 格式的密码
+            credentials = JSON.parse(stdout.strip)
+            return credentials["claudeAiOauth"]
+          end
+        rescue JSON::ParserError, StandardError
+          # 如果不是 JSON 格式，尝试直接返回
+          return stdout.strip if status.success? && !stdout.strip.empty?
+        end
+        
+        nil
+      end
+      
+      def self.configure_keychain(config)
+        credentials = {
+          "claudeAiOauth" => config["key_chain"]["claudeAiOauth"]
+        }
+        
+        service_name = config["key_chain"]["service_name"]
+        account_name = Etc.getlogin || ENV['USER'] || ENV['LOGNAME']
+        label = service_name
+        password = credentials.to_json
+        
+        cmd = [
+          "security",
+          "add-generic-password",
+          "-a", account_name,
+          "-s", service_name,
+          "-l", label,
+          "-w", password,
+          "-U",
+          "-T", ""
+        ]
+        
+        system(*cmd)
+        
+        if $?.success?
+          verify_keychain_entry(account_name, service_name)
+        else
+          puts "✗ 保存凭证到 Keychain 失败"
+          return false
+        end
+        
+        true
+      end
+      
+      def self.verify_keychain_entry(account_name, service_name)
+        verify_cmd = [
+          "security",
+          "find-generic-password",
+          "-a", account_name,
+          "-s", service_name
+        ]
+        
+        unless system(*verify_cmd, out: File::NULL, err: File::NULL)
+          puts "✗ 无法验证 Keychain 条目"
+        end
+      end
+      
+      def self.verify_token_config(config)
+        token = config["env"]["CLAUDE_CODE_OAUTH_TOKEN"]
+        return false unless token
+        
+        # 只验证令牌存在且不为空，不写入任何配置文件
+        if token && !token.strip.empty?
+          # 清理任何现有的环境配置文件中的令牌定义
+          clean_env_variables
+          return true
+        else
+          puts "✗ 令牌配置无效"
+          return false
+        end
+      end
+      
+      def self.update_claude_json(config)
+        user_claude_file = File.expand_path("~/.claude.json")
+        
+        begin
+          # 读取现有文件或创建空哈希
+          if File.exist?(user_claude_file)
+            user_config = JSON.parse(File.read(user_claude_file))
+          else
+            user_config = {}
+          end
+          
+          # 合并 claude_json 内容，过滤掉代理相关字段
+          claude_config = config["claude_json"].dup
+          claude_config.delete("claude_proxy")
+          claude_config.delete("HTTP_PROXY")
+          claude_config.delete("HTTPS_PROXY")
+          
+          user_config.merge!(claude_config)
+          
+          # 写回文件
+          File.write(user_claude_file, JSON.pretty_generate(user_config))
+          
+        rescue JSON::ParserError => e
+          puts "✗ 解析现有 ~/.claude.json 失败: #{e.message}"
+          false
+        rescue => e
+          puts "✗ 更新 ~/.claude.json 失败: #{e.message}"
+          false
+        end
+      end
+      
+      def self.configure_proxy(config)
+        return unless config["claude_proxy"] && (config["claude_proxy"]["HTTP_PROXY"] || config["claude_proxy"]["HTTPS_PROXY"])
+        
+        http_proxy = config["claude_proxy"]["HTTP_PROXY"]
+        https_proxy = config["claude_proxy"]["HTTPS_PROXY"]
+        
+        shell_files = get_shell_files
+        
+        shell_files.each do |shell_file|
+          next unless File.exist?(shell_file)
+          
+          begin
+            content = File.read(shell_file)
+            lines = content.split("\n", -1)
+            lines.pop if lines.last == ""
+            
+            # 移除所有现有的代理相关配置
+            lines = remove_proxy_config(lines, shell_file)
+            
+            # 只添加代理别名/函数，不直接设置环境变量
+            lines = add_proxy_aliases(lines, shell_file, http_proxy, https_proxy)
+            
+            # 写回文件
+            File.write(shell_file, lines.join("\n") + "\n")
+            
+          rescue => e
+            puts "  ✗ 更新 #{shell_file} 失败: #{e.message}"
+          end
+        end
+        
+        # 显示代理配置完成信息
+        puts "✅ 代理别名已配置 | claude_proxy / unclaude_proxy"
+      end
+      
+      def self.prompt_for_token
+        puts "请输入您的 CLAUDE_CODE_OAUTH_TOKEN："
+        print "> "
+        
+        begin
+          # 简化输入处理，直接使用 STDIN
+          STDIN.gets&.chomp
+        rescue => e
+          puts "✗ 无法读取输入: #{e.message}"
+          puts "  请使用本地配置文件或 --user 参数"
+          nil
+        end
+      end
+      
+      def self.clean_env_variables
+        shell_files = get_shell_files
+        
+        shell_files.each do |shell_file|
+          next unless File.exist?(shell_file)
+          
+          begin
+            content = File.read(shell_file)
+            lines = content.split("\n", -1)
+            lines.pop if lines.last == ""
+            
+            patterns = get_token_patterns(shell_file)
+            original_count = lines.length
+            lines.reject! { |line| patterns.any? { |pattern| line.match(pattern) } }
+            removed_count = original_count - lines.length
+            
+            if removed_count > 0
+              File.write(shell_file, lines.join("\n") + "\n")
+            end
+          rescue => e
+            puts "  ✗ 清理 #{shell_file} 失败: #{e.message}"
+          end
+        end
+      end
+      
+      def self.clean_keychain
+        is_macos = RUBY_PLATFORM.include?('darwin')
+        
+        if is_macos
+          service_name = "Claude Code-credentials"
+          account_name = Etc.getlogin || ENV['USER'] || ENV['LOGNAME']
+          
+          cmd = [
+            "security",
+            "delete-generic-password",
+            "-a", account_name,
+            "-s", service_name
+          ]
+          
+          stdout, stderr, status = Open3.capture3(*cmd)
+          
+          unless status.success? || stderr.include?("could not be found")
+            puts "  警告: 清理 Keychain 失败: #{stderr}"
+          end
+        end
+      end
+      
+      def self.get_shell_files
+        shell_files = []
+        current_shell = ENV['SHELL']&.split('/')&.last || 'bash'
+        
+        case current_shell
+        when 'zsh'
+          shell_files << File.expand_path("~/.zshrc")
+        when 'bash'
+          bash_profile = File.expand_path("~/.bash_profile")
+          bashrc = File.expand_path("~/.bashrc")
+          shell_files << (File.exist?(bash_profile) ? bash_profile : bashrc)
+        when 'fish'
+          fish_config = File.expand_path("~/.config/fish/config.fish")
+          shell_files << fish_config
+          
+          # 确保 fish 配置目录存在
+          fish_dir = File.dirname(fish_config)
+          unless File.exist?(fish_dir)
+            FileUtils.mkdir_p(fish_dir)
+            puts "  创建目录: #{fish_dir}"
+          end
+        else
+          shell_files << File.expand_path("~/.profile")
+        end
+        
+        # 总是添加 ~/.profile 作为备份
+        profile_file = File.expand_path("~/.profile")
+        shell_files << profile_file unless shell_files.include?(profile_file)
+        
+        shell_files
+      end
+      
+      def self.get_token_patterns(shell_file)
+        key = "CLAUDE_CODE_OAUTH_TOKEN"
+        
+        if shell_file.include?("config.fish")
+          [
+            /^set\s+-gx\s+#{Regexp.escape(key)}\s/,
+            /^set\s+-x\s+#{Regexp.escape(key)}\s/,
+            /^#set\s+-gx\s+#{Regexp.escape(key)}\s/
+          ]
+        else
+          [
+            /^export\s+#{Regexp.escape(key)}=/,
+            /^#{Regexp.escape(key)}=/,
+            /^#export\s+#{Regexp.escape(key)}=/
+          ]
+        end
+      end
+      
+      def self.get_export_line(shell_file, token)
+        key = "CLAUDE_CODE_OAUTH_TOKEN"
+        
+        if shell_file.include?("config.fish")
+          "set -gx #{key} \"#{token}\""
+        else
+          "export #{key}=\"#{token}\""
+        end
+      end
+      
+      def self.remove_proxy_config(lines, shell_file)
+        if shell_file.include?("config.fish")
+          # Fish shell 代理配置清理 - 移除直接的环境变量设置和代理相关的别名/函数
+          lines.reject! { |line|
+            line.match(/^set\s+-[gx]+\s+(HTTP_PROXY|HTTPS_PROXY|http_proxy|https_proxy)\s/) ||
+            line.match(/^export\s+(HTTP_PROXY|HTTPS_PROXY|http_proxy|https_proxy)=/) ||
+            line.match(/^alias\s+claude_proxy=/) ||
+            line.match(/^alias\s+unclaude_proxy=/) ||
+            line.match(/^function\s+(claude_proxy|unclaude_proxy)/)
+          }
+          
+          # 移除函数块
+          in_function = false
+          lines.select do |line|
+            if line.match(/^function\s+(claude_proxy|unclaude_proxy)/)
+              in_function = true
+              false
+            elsif in_function && line.strip == "end"
+              in_function = false
+              false
+            elsif in_function
+              false
+            else
+              true
+            end
+          end
+        else
+          # Bash/zsh 代理配置清理 - 移除直接的环境变量设置和代理相关的别名/函数
+          lines.reject! { |line|
+            line.match(/^export\s+(HTTP_PROXY|HTTPS_PROXY|http_proxy|https_proxy)=/) ||
+            line.match(/^(HTTP_PROXY|HTTPS_PROXY|http_proxy|https_proxy)=/) ||
+            line.match(/^alias\s+(claude_proxy|unclaude_proxy)=/) ||
+            line.match(/^(claude_proxy|unclaude_proxy)\(\)/)
+          }
+          
+          # 移除函数块
+          in_function = false
+          function_depth = 0
+          lines.select do |line|
+            if line.match(/^(claude_proxy|unclaude_proxy)\(\)/)
+              in_function = true
+              function_depth = 0
+              false
+            elsif in_function
+              function_depth += 1 if line.include?("{")
+              if line.include?("}")
+                function_depth -= 1
+                in_function = false if function_depth <= 0
+              end
+              false
+            else
+              true
+            end
+          end
+        end
+      end
+      
+      def self.add_proxy_aliases(lines, shell_file, http_proxy, https_proxy)
+        if shell_file.include?("config.fish")
+          # Fish shell - 只添加函数，不直接设置环境变量
+          proxy_commands = []
+          proxy_commands << ""
+          proxy_commands << "function claude_proxy"
+          if http_proxy
+            proxy_commands << "    set -gx HTTP_PROXY \"#{http_proxy}\""
+            proxy_commands << "    set -gx http_proxy \"#{http_proxy}\""
+          end
+          if https_proxy
+            proxy_commands << "    set -gx HTTPS_PROXY \"#{https_proxy}\""
+            proxy_commands << "    set -gx https_proxy \"#{https_proxy}\""
+          end
+          proxy_commands << "    echo '代理已启用: HTTP_PROXY=#{http_proxy || 'not set'}, HTTPS_PROXY=#{https_proxy || 'not set'}'"
+          proxy_commands << "end"
+          
+          proxy_commands << ""
+          proxy_commands << "function unclaude_proxy"
+          proxy_commands << "    set -e HTTP_PROXY"
+          proxy_commands << "    set -e http_proxy"
+          proxy_commands << "    set -e HTTPS_PROXY"
+          proxy_commands << "    set -e https_proxy"
+          proxy_commands << "    echo '代理已禁用'"
+          proxy_commands << "end"
+          
+          lines.concat(proxy_commands)
+        else
+          # Bash/zsh - 只添加别名，不直接设置环境变量
+          proxy_exports = []
+          if http_proxy
+            proxy_exports << "export HTTP_PROXY=\"#{http_proxy}\""
+            proxy_exports << "export http_proxy=\"#{http_proxy}\""
+          end
+          if https_proxy
+            proxy_exports << "export HTTPS_PROXY=\"#{https_proxy}\""
+            proxy_exports << "export https_proxy=\"#{https_proxy}\""
+          end
+          
+          if proxy_exports.any?
+            lines << ""
+            lines << "alias claude_proxy='#{proxy_exports.join("; ")}; echo \"代理已启用: HTTP_PROXY=#{http_proxy || 'not set'}, HTTPS_PROXY=#{https_proxy || 'not set'}\"'"
+          end
+          
+          lines << "alias unclaude_proxy='unset HTTP_PROXY http_proxy HTTPS_PROXY https_proxy; echo \"代理已禁用\"'"
+        end
+        
+        lines
+      end
+    end
+  end
+end