opencode-codebuddy-external-auth 1.0.0 → 1.0.1

package/dist/plugin.js

@@ -8,11 +8,7 @@ const PROVIDER_ID = "codebuddy-external";
 const CONFIG = {
     // IOA 版本使用 copilot.tencent.com
     serverUrl: "https://copilot.tencent.com",
-    // 认证 ID（来自 product.json）
-    authId: "Tencent-Cloud.coding-copilot",
-    // API 端点
-    // 注意：Anthropic SDK 会自动追加 /messages，所以 baseURL 需要以 /v1 结尾
-    // 完整路径: https://copilot.tencent.com/plugin/v1/messages
+    // API 端点 - Anthropic SDK 会自动追加 /messages
     apiBaseUrl: "https://copilot.tencent.com/plugin/v1",
     // 平台标识
     platform: "CLI",
@@ -24,6 +20,9 @@ const CONFIG = {
 function sleep(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
 }
+function generateState() {
+    return crypto.randomUUID();
+}
 /**
  * Creates an authenticated fetch function with CodeBuddy headers
  */
@@ -44,30 +43,18 @@ function createAuthenticatedFetch(accessToken, userId) {
     };
 }
 // ============================================================================
-// OAuth Flow Implementation (External Link / IOA)
+// OAuth Flow Implementation (IOA Login)
 // ============================================================================
 /**
- * Start authentication by getting the auth state URL
+ * Build the login URL for IOA authentication
  */
-async function getAuthState() {
-    const response = await fetch(`${CONFIG.serverUrl}/plugin/auth/state?platform=${CONFIG.platform}`, {
-        method: "GET",
-        headers: {
-            "Content-Type": "application/json",
-        },
+function buildLoginUrl(state) {
+    const params = new URLSearchParams({
+        platform: CONFIG.platform,
+        state: state,
+        ioa: "1", // IOA version flag
     });
-    if (!response.ok) {
-        throw new Error(`Auth state request failed: ${response.status}`);
-    }
-    const data = await response.json();
-    if (!data.data?.state || !data.data?.url) {
-        throw new Error("Invalid auth state response");
-    }
-    return {
-        state: data.data.state,
-        url: data.data.url,
-        expiresAt: Date.now() + 10 * 60 * 1000, // 10 minutes
-    };
+    return `${CONFIG.serverUrl}/login?${params.toString()}`;
 }
 /**
  * Poll for token after user completes browser authentication
@@ -84,6 +71,7 @@ async function pollForToken(state, expiresAt, signal) {
                 method: "GET",
                 headers: {
                     "Content-Type": "application/json",
+                    "Accept": "application/json",
                 },
                 signal,
             });
@@ -167,15 +155,17 @@ const CodeBuddyExternalAuthPlugin = async (_input) => {
                     label: "IOA 登录 (浏览器)",
                     type: "oauth",
                     async authorize() {
-                        // Get auth state from server
-                        const authState = await getAuthState();
+                        // Generate state for CSRF protection
+                        const state = generateState();
+                        const loginUrl = buildLoginUrl(state);
+                        const expiresAt = Date.now() + 10 * 60 * 1000; // 10 minutes
                         return {
-                            url: authState.url,
+                            url: loginUrl,
                             instructions: `请在浏览器中完成 IOA 登录`,
                             method: "auto",
                             async callback() {
                                 // Poll for token
-                                const tokenData = await pollForToken(authState.state, authState.expiresAt);
+                                const tokenData = await pollForToken(state, expiresAt);
                                 if (!tokenData) {
                                     return { type: "failed" };
                                 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-codebuddy-external-auth",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "OpenCode plugin for CodeBuddy External (IOA) authentication",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",