dsh-plugin-onenote 0.2.3 → 0.2.4

package/README.md

@@ -68,6 +68,8 @@ one in about two minutes — no paid subscription is needed:
    personal Microsoft accounts*. Choose a single-tenant option instead if every
    user is in one tenant.
 4. **Redirect URI**: leave empty — the device-code flow needs none.
+   *(Optional: if you configure a platform, choose **Mobile and desktop applications**
+   and tick `https://login.microsoftonline.com/common/oauth2/nativeclient`).*
 5. **Register**, then copy **Application (client) ID**.
 6. **Authentication → Advanced settings → Allow public client flows** = **Yes**,
    then **Save**. Without this, sign-in fails with `unauthorized_client`.
@@ -78,6 +80,17 @@ one in about two minutes — no paid subscription is needed:
 8. No client secret and no admin consent are needed for a personal account. A
    work account may need an admin to grant consent once.
 
+### Troubleshooting: "missing 'redirect_uri' input parameter"
+
+If Microsoft fails with `invalid_request: The provided request must include a 'redirect_uri' input parameter`:
+
+- **Cause**: At `microsoft.com/devicelogin`, selecting a Passkey / security key /
+  Windows Hello shortcut directly without typing your username causes Microsoft's
+  login service to misroute the device code flow into an interactive web flow.
+- **Fix**: In the browser, **manually type your full Microsoft account email address**
+  first, then click **Next** before completing authentication. Alternatively,
+  open the verification link in an **InPrivate / Incognito** window.
+
 Then point the plugin at your app by adding a patch layer of your own:
 
 ```yaml

package/README.zh.md

@@ -61,6 +61,7 @@ dsh plugin install dsh-plugin-onenote
 3. **受支持的账户类型**：选择 *任何组织目录中的帐户和个人 Microsoft 帐户*。如果所有用户都在同一租户，
    可以选单租户。
 4. **重定向 URI**：留空——设备码流程不需要。
+   *(可选：如需添加平台，请选择 **移动和桌面应用程序** 并勾选 `https://login.microsoftonline.com/common/oauth2/nativeclient`)*。
 5. 点击 **注册**，复制 **应用程序(客户端) ID**。
 6. **身份验证 → 高级设置 → 允许公共客户端流** = **是**，然后 **保存**。不做这一步会报
    `unauthorized_client`。
@@ -70,6 +71,13 @@ dsh plugin install dsh-plugin-onenote
    - `User.Read` —— 显示登录账号名
 8. 个人账户不需要客户端密码，也不需要管理员同意。工作账户可能需要管理员授权一次。
 
+### 常见问题：报错 "missing 'redirect_uri' input parameter"
+
+若在微软侧登录时提示 `invalid_request: The provided request must include a 'redirect_uri' input parameter`：
+
+- **原因**：在访问 `microsoft.com/devicelogin` 输入设备码后，若直接点击 Passkey / 脸部指纹安全密钥等快捷方式登录，微软登录端可能发生跳转异常，将设备码流程误判定为需要回调地址的 Web 交互流程。
+- **解决方法**：在浏览器登录界面中，**先手动完整输入微软账号邮箱**，点击“下一步”后再验证；或直接在**浏览器的无痕/隐私窗口（InPrivate / Incognito）**中打开链接并完成登录。
+
 然后在自己的 patch 层里指向你的应用：
 
 ```yaml

package/client.js

@@ -40,6 +40,7 @@ window.__ModuleLoader__.load({
       'pending.expired': 'That code expired. Start sign-in again for a fresh one.',
       'pending.copy': 'Copy code',
       'pending.copied': 'Copied',
+      'pending.tip': 'Note: If Microsoft shows "missing redirect_uri", do not click Passkey/security key directly. Enter your full Microsoft email address first, or use a private/incognito window.',
       'signedIn.title': 'Connected',
       'signedIn.as': 'Signed in as {name}',
       'signedIn.account': 'Signed in',
@@ -84,6 +85,7 @@ window.__ModuleLoader__.load({
       'pending.expired': '代码已过期，请重新开始登录。',
       'pending.copy': '复制代码',
       'pending.copied': '已复制',
+      'pending.tip': '提示：若微软报错“缺少 redirect_uri”，切勿直接点击 Passkey/安全密钥，请先手动输入完整微软邮箱账号，或使用浏览器无痕/隐私窗口重试。',
       'signedIn.title': '已连接',
       'signedIn.as': '已登录：{name}',
       'signedIn.account': '已登录',
@@ -411,7 +413,8 @@ window.__ModuleLoader__.load({
             }, tr('pending.open')),
             h('button', { type: 'button', className: 'dsh-onenote-btn', onClick: copyCode }, copied ? tr('pending.copied') : tr('pending.copy')),
             h('span', { className: 'dsh-onenote-caption' }, tr('pending.expires', { seconds: pending.expiresInSeconds }))
-          )
+          ),
+          h('div', { className: 'dsh-onenote-warn' }, tr('pending.tip'))
         ))
       }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-plugin-onenote",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "description": "Read the Microsoft OneNote notebooks you allow, from DeepSeek Harness. Device-code sign-in and a per-notebook allow-list you control in Settings. · 让 DSH 读取你勾选的 OneNote 笔记本：设备码登录，笔记本白名单在设置页勾选。",
   "type": "module",
   "main": "./index.js",