@clinebot/core 0.0.27 → 0.0.29

package/src/auth/cline.test.ts

@@ -1,10 +1,11 @@
 import { afterEach, describe, expect, it, vi } from "vitest";
 import type { ClineOAuthCredentials } from "./cline";
-import { getValidClineCredentials } from "./cline";
+import { getValidClineCredentials, loginClineOAuth } from "./cline";
 
 const PROVIDER_OPTIONS = {
 	apiBaseUrl: "https://auth.example.com",
 };
+const ORIGINAL_FETCH = globalThis.fetch;
 
 function createCredentials(
 	overrides: Partial<ClineOAuthCredentials> = {},
@@ -22,15 +23,15 @@ function createCredentials(
 
 describe("auth/cline getValidClineCredentials", () => {
 	afterEach(() => {
-		vi.unstubAllGlobals();
 		vi.restoreAllMocks();
+		globalThis.fetch = ORIGINAL_FETCH;
 	});
 
 	it("returns existing credentials when not expired", async () => {
 		const nowSpy = vi.spyOn(Date, "now").mockReturnValue(10_000);
 		const current = createCredentials({ expires: 400_000 });
 		const fetchMock = vi.fn();
-		vi.stubGlobal("fetch", fetchMock);
+		globalThis.fetch = fetchMock as unknown as typeof fetch;
 
 		const result = await getValidClineCredentials(current, PROVIDER_OPTIONS);
 		expect(result).toBe(current);
@@ -63,7 +64,7 @@ describe("auth/cline getValidClineCredentials", () => {
 					{ status: 200, headers: { "Content-Type": "application/json" } },
 				),
 		);
-		vi.stubGlobal("fetch", fetchMock);
+		globalThis.fetch = fetchMock as unknown as typeof fetch;
 
 		const result = await getValidClineCredentials(current, PROVIDER_OPTIONS);
 		expect(result).toMatchObject({
@@ -78,22 +79,19 @@ describe("auth/cline getValidClineCredentials", () => {
 	it("returns null when refresh fails with invalid_grant", async () => {
 		const nowSpy = vi.spyOn(Date, "now").mockReturnValue(100_000);
 		const current = createCredentials({ expires: 101_000 });
-		vi.stubGlobal(
-			"fetch",
-			vi.fn(
-				async () =>
-					new Response(
-						JSON.stringify({
-							error: "invalid_grant",
-							error_description: "refresh expired",
-						}),
-						{
-							status: 401,
-							headers: { "Content-Type": "application/json" },
-						},
-					),
-			),
-		);
+		globalThis.fetch = vi.fn(
+			async () =>
+				new Response(
+					JSON.stringify({
+						error: "invalid_grant",
+						error_description: "refresh expired",
+					}),
+					{
+						status: 401,
+						headers: { "Content-Type": "application/json" },
+					},
+				),
+		) as unknown as typeof fetch;
 
 		const result = await getValidClineCredentials(current, PROVIDER_OPTIONS);
 		expect(result).toBeNull();
@@ -103,22 +101,19 @@ describe("auth/cline getValidClineCredentials", () => {
 	it("keeps current credentials on transient refresh error while token remains valid", async () => {
 		const nowSpy = vi.spyOn(Date, "now").mockReturnValue(100_000);
 		const current = createCredentials({ expires: 150_000 });
-		vi.stubGlobal(
-			"fetch",
-			vi.fn(
-				async () =>
-					new Response(
-						JSON.stringify({
-							error: "server_error",
-							error_description: "temporary issue",
-						}),
-						{
-							status: 500,
-							headers: { "Content-Type": "application/json" },
-						},
-					),
-			),
-		);
+		globalThis.fetch = vi.fn(
+			async () =>
+				new Response(
+					JSON.stringify({
+						error: "server_error",
+						error_description: "temporary issue",
+					}),
+					{
+						status: 500,
+						headers: { "Content-Type": "application/json" },
+					},
+				),
+		) as unknown as typeof fetch;
 
 		const result = await getValidClineCredentials(current, PROVIDER_OPTIONS, {
 			refreshBufferMs: 60_000,
@@ -128,3 +123,145 @@ describe("auth/cline getValidClineCredentials", () => {
 		nowSpy.mockRestore();
 	});
 });
+
+describe("auth/cline loginClineOAuth", () => {
+	afterEach(() => {
+		vi.restoreAllMocks();
+		globalThis.fetch = ORIGINAL_FETCH;
+	});
+
+	it("completes WorkOS device auth and registers tokens", async () => {
+		const fetchMock = vi
+			.fn()
+			.mockResolvedValueOnce(
+				new Response(
+					JSON.stringify({
+						device_code: "dev-code-1",
+						user_code: "ABCD-EFGH",
+						verification_uri: "https://example.com/device",
+						verification_uri_complete:
+							"https://example.com/device?user_code=ABCD-EFGH",
+						expires_in: 300,
+						interval: 1,
+					}),
+					{ status: 200, headers: { "Content-Type": "application/json" } },
+				),
+			)
+			.mockResolvedValueOnce(
+				new Response(
+					JSON.stringify({
+						access_token: "workos-access",
+						refresh_token: "workos-refresh",
+						token_type: "Bearer",
+						expires_in: 3600,
+					}),
+					{ status: 200, headers: { "Content-Type": "application/json" } },
+				),
+			)
+			.mockResolvedValueOnce(
+				new Response(
+					JSON.stringify({
+						success: true,
+						data: {
+							accessToken: "cline-access",
+							refreshToken: "cline-refresh",
+							tokenType: "Bearer",
+							expiresAt: "2030-01-01T00:00:00.000Z",
+							userInfo: {
+								subject: "sub-1",
+								email: "user@example.com",
+								name: "User",
+								clineUserId: "acct-1",
+								accounts: ["acct-1"],
+							},
+						},
+					}),
+					{ status: 200, headers: { "Content-Type": "application/json" } },
+				),
+			);
+		globalThis.fetch = fetchMock as unknown as typeof fetch;
+
+		const onAuth = vi.fn();
+		const credentials = await loginClineOAuth({
+			apiBaseUrl: "https://api.cline.bot",
+			useWorkOSDeviceAuth: true,
+			callbacks: {
+				onAuth,
+				onPrompt: async () => "",
+			},
+		});
+
+		expect(onAuth).toHaveBeenCalledTimes(1);
+		expect(onAuth.mock.calls[0]?.[0]).toMatchObject({
+			url: "https://example.com/device?user_code=ABCD-EFGH",
+		});
+		expect(credentials).toMatchObject({
+			access: "cline-access",
+			refresh: "cline-refresh",
+			accountId: "acct-1",
+			email: "user@example.com",
+		});
+		expect(fetchMock).toHaveBeenCalledTimes(3);
+		const registerCallBody = JSON.parse(
+			String(fetchMock.mock.calls[2]?.[1]?.body ?? "{}"),
+		);
+		const deviceAuthBody = String(fetchMock.mock.calls[0]?.[1]?.body ?? "");
+		const deviceAuthParams = new URLSearchParams(deviceAuthBody);
+		expect(deviceAuthParams.get("client_id")).toMatch(/client_.*/);
+		expect(registerCallBody).toMatchObject({
+			accessToken: "workos-access",
+			refreshToken: "workos-refresh",
+		});
+	});
+
+	it("uses legacy callback OAuth flow by default", async () => {
+		const fetchMock = vi.fn(async (_url: string, init?: RequestInit) => {
+			const body =
+				typeof init?.body === "string"
+					? (JSON.parse(init.body) as Record<string, unknown>)
+					: {};
+			if (body.grant_type === "authorization_code") {
+				return new Response(
+					JSON.stringify({
+						success: true,
+						data: {
+							accessToken: "legacy-access",
+							refreshToken: "legacy-refresh",
+							tokenType: "Bearer",
+							expiresAt: "2030-01-01T00:00:00.000Z",
+							userInfo: {
+								subject: "sub-legacy",
+								email: "legacy@example.com",
+								name: "Legacy User",
+								clineUserId: "acct-legacy",
+								accounts: ["acct-legacy"],
+							},
+						},
+					}),
+					{ status: 200, headers: { "Content-Type": "application/json" } },
+				);
+			}
+			return new Response("not-found", { status: 404 });
+		});
+		globalThis.fetch = fetchMock as unknown as typeof fetch;
+
+		const credentials = await loginClineOAuth({
+			apiBaseUrl: "https://api.cline.bot",
+			callbackPorts: [48801],
+			callbacks: {
+				onAuth: () => {},
+				onPrompt: async () => "http://127.0.0.1:48801/auth?code=legacy-code",
+				onManualCodeInput: async () =>
+					"http://127.0.0.1:48801/auth?code=legacy-code",
+			},
+		});
+
+		expect(credentials).toMatchObject({
+			access: "legacy-access",
+			refresh: "legacy-refresh",
+			accountId: "acct-legacy",
+			email: "legacy@example.com",
+		});
+		expect(fetchMock).toHaveBeenCalledTimes(1);
+	});
+});