opencode-codebuddy-external-auth 1.0.1 → 1.0.3

package/dist/plugin.js

@@ -20,9 +20,6 @@ const CONFIG = {
 function sleep(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
 }
-function generateState() {
-    return crypto.randomUUID();
-}
 /**
  * Creates an authenticated fetch function with CodeBuddy headers
  */
@@ -46,15 +43,37 @@ function createAuthenticatedFetch(accessToken, userId) {
 // OAuth Flow Implementation (IOA Login)
 // ============================================================================
 /**
- * Build the login URL for IOA authentication
+ * Request auth state from server - the state is generated by server, not client!
+ * This matches the behavior of `codebuddy /login` command
  */
-function buildLoginUrl(state) {
+async function requestAuthState() {
+    // 构造与 codebuddy CLI 相同的请求
+    // codebuddy 输出的 URL: https://copilot.tencent.com/login?platform=CLI&state=xxx&ioa=1
     const params = new URLSearchParams({
         platform: CONFIG.platform,
-        state: state,
-        ioa: "1", // IOA version flag
+        ioa: "1",
+    });
+    const response = await fetch(`${CONFIG.serverUrl}/plugin/auth/state?${params.toString()}`, {
+        method: "GET",
+        headers: {
+            Accept: "application/json",
+        },
     });
-    return `${CONFIG.serverUrl}/login?${params.toString()}`;
+    if (!response.ok) {
+        const text = await response.text();
+        throw new Error(`Auth state request failed: ${response.status} - ${text}`);
+    }
+    const data = await response.json();
+    if (!data.data?.state) {
+        throw new Error(`Invalid auth state response: ${JSON.stringify(data)}`);
+    }
+    // 构造登录 URL（与 codebuddy CLI 输出的格式一致）
+    const loginUrl = data.data.url ||
+        `${CONFIG.serverUrl}/login?platform=${CONFIG.platform}&state=${data.data.state}&ioa=1`;
+    return {
+        state: data.data.state,
+        url: loginUrl,
+    };
 }
 /**
  * Poll for token after user completes browser authentication
@@ -70,8 +89,7 @@ async function pollForToken(state, expiresAt, signal) {
             const response = await fetch(`${CONFIG.serverUrl}/plugin/auth/token?state=${state}`, {
                 method: "GET",
                 headers: {
-                    "Content-Type": "application/json",
-                    "Accept": "application/json",
+                    Accept: "application/json",
                 },
                 signal,
             });
@@ -155,17 +173,17 @@ const CodeBuddyExternalAuthPlugin = async (_input) => {
                     label: "IOA 登录 (浏览器)",
                     type: "oauth",
                     async authorize() {
-                        // Generate state for CSRF protection
-                        const state = generateState();
-                        const loginUrl = buildLoginUrl(state);
+                        // 关键修改：从服务端获取 state，而不是客户端生成
+                        // 这与 codebuddy CLI 的 /login 命令行为一致
+                        const authState = await requestAuthState();
                         const expiresAt = Date.now() + 10 * 60 * 1000; // 10 minutes
                         return {
-                            url: loginUrl,
+                            url: authState.url,
                             instructions: `请在浏览器中完成 IOA 登录`,
                             method: "auto",
                             async callback() {
-                                // Poll for token
-                                const tokenData = await pollForToken(state, expiresAt);
+                                // 使用服务端返回的 state 轮询 token
+                                const tokenData = await pollForToken(authState.state, expiresAt);
                                 if (!tokenData) {
                                     return { type: "failed" };
                                 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-codebuddy-external-auth",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "OpenCode plugin for CodeBuddy External (IOA) authentication",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",