ework-web 0.10.28 → 0.10.29

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ework-web",
-  "version": "0.10.28",
+  "version": "0.10.29",
   "type": "module",
   "description": "ework-web — standalone multi-project issue tracker. Local SQLite-backed, no external API dependency. Bun + TypeScript + SSR HTML.",
   "license": "MIT",

package/src/index.ts

@@ -10,6 +10,7 @@ import { getActiveDaemons, listAllDaemons, getSessionDaemonMap, resolveDaemonEnd
 import { testMysqlConnection, migrateSqliteToMysql, writeMysqlEnv, migrateMysqlToSqlite, writeSqliteEnv, migrateDaemonSqliteToMysql, generateMysqlDDL } from "./db-admin";
 import type { MysqlTargetOpts } from "./db-admin";
 import { checkAuth, makeAuthCookieHeader, clearAuthCookieHeader, loginHTML, sanitizeNext, ensureBootstrapAdmin, ensureBootstrapSystem, isReservedSystemLogin } from "./auth";
+import { runAuthHook } from "./auth-hook";
 import { OpencodeError, createOpencodeClient, MultiDaemonOpencodeClient, RemoteOpencodeClient, isLocalhost, type OpencodeClientInterface } from "./opencode";
 import { renderMarkdown } from "./render/markdown";
 import { log, uptimeSeconds, version } from "./logger";
@@ -495,6 +496,14 @@ async function handle(req: Request, url: URL, ip: string, ctx: { authed: boolean
         if (u) resolvedLogin = u.login;
       }
 
+      if (!resolvedLogin && token && cfg.userAuthHook) {
+        const hookReq = new Request(url, {
+          headers: { authorization: `Bearer ${token}` },
+        });
+        const user = await runAuthHook(cfg.userAuthHook, hookReq);
+        if (user) resolvedLogin = user.login;
+      }
+
       if (resolvedLogin) {
         const setCookie = await makeAuthCookieHeader(cfg, resolvedLogin);
         return new Response(null, {