opencode-codebuddy-external-auth 1.0.3 → 1.0.4

package/dist/plugin.js

@@ -44,19 +44,27 @@ function createAuthenticatedFetch(accessToken, userId) {
 // ============================================================================
 /**
  * Request auth state from server - the state is generated by server, not client!
- * This matches the behavior of `codebuddy /login` command
+ *
+ * 关键发现：
+ * 1. 使用 POST 方法，不是 GET
+ * 2. 路径是 /v2/plugin/auth/state，不是 /plugin/auth/state
+ * 3. 需要设置 X-No-Authorization 等 Headers
  */
 async function requestAuthState() {
-    // 构造与 codebuddy CLI 相同的请求
-    // codebuddy 输出的 URL: https://copilot.tencent.com/login?platform=CLI&state=xxx&ioa=1
     const params = new URLSearchParams({
         platform: CONFIG.platform,
         ioa: "1",
     });
-    const response = await fetch(`${CONFIG.serverUrl}/plugin/auth/state?${params.toString()}`, {
-        method: "GET",
+    const response = await fetch(`${CONFIG.serverUrl}/v2/plugin/auth/state?${params.toString()}`, {
+        method: "POST", // 关键：使用 POST 方法
         headers: {
-            Accept: "application/json",
+            "Accept": "application/json",
+            "Content-Type": "application/json",
+            // 这些 Headers 告诉服务端跳过认证检查
+            "X-No-Authorization": "true",
+            "X-No-User-Id": "true",
+            "X-No-Enterprise-Id": "true",
+            "X-No-Department-Info": "true",
         },
     });
     if (!response.ok) {
@@ -64,11 +72,11 @@ async function requestAuthState() {
         throw new Error(`Auth state request failed: ${response.status} - ${text}`);
     }
     const data = await response.json();
-    if (!data.data?.state) {
+    if (data.code !== 0 || !data.data?.state) {
         throw new Error(`Invalid auth state response: ${JSON.stringify(data)}`);
     }
-    // 构造登录 URL（与 codebuddy CLI 输出的格式一致）
-    const loginUrl = data.data.url ||
+    // 使用服务端返回的 authUrl，或构造默认 URL
+    const loginUrl = data.data.authUrl ||
         `${CONFIG.serverUrl}/login?platform=${CONFIG.platform}&state=${data.data.state}&ioa=1`;
     return {
         state: data.data.state,
@@ -77,6 +85,8 @@ async function requestAuthState() {
 }
 /**
  * Poll for token after user completes browser authentication
+ *
+ * 注意：token 端点也需要使用 /v2 前缀
  */
 async function pollForToken(state, expiresAt, signal) {
     const pollInterval = 3000; // 3 seconds
@@ -86,16 +96,20 @@ async function pollForToken(state, expiresAt, signal) {
         }
         await sleep(pollInterval);
         try {
-            const response = await fetch(`${CONFIG.serverUrl}/plugin/auth/token?state=${state}`, {
+            const response = await fetch(`${CONFIG.serverUrl}/v2/plugin/auth/token?state=${state}`, {
                 method: "GET",
                 headers: {
-                    Accept: "application/json",
+                    "Accept": "application/json",
+                    "X-No-Authorization": "true",
+                    "X-No-User-Id": "true",
+                    "X-No-Enterprise-Id": "true",
+                    "X-No-Department-Info": "true",
                 },
                 signal,
             });
             if (response.ok) {
                 const data = await response.json();
-                if (data.data?.accessToken) {
+                if (data.code === 0 && data.data?.accessToken) {
                     return data.data;
                 }
             }
@@ -115,11 +129,12 @@ async function pollForToken(state, expiresAt, signal) {
  */
 async function refreshAccessToken(refreshToken) {
     try {
-        const response = await fetch(`${CONFIG.serverUrl}/plugin/auth/token/refresh`, {
+        const response = await fetch(`${CONFIG.serverUrl}/v2/plugin/auth/token/refresh`, {
             method: "POST",
             headers: {
                 "Content-Type": "application/json",
-                Authorization: `Bearer ${refreshToken}`,
+                "Accept": "application/json",
+                "Authorization": `Bearer ${refreshToken}`,
             },
         });
         if (!response.ok) {
@@ -127,6 +142,10 @@ async function refreshAccessToken(refreshToken) {
             return null;
         }
         const data = await response.json();
+        if (data.code !== 0) {
+            console.warn(`[codebuddy-external] Token refresh error: ${data.msg}`);
+            return null;
+        }
         return data.data || null;
     }
     catch (error) {
@@ -173,8 +192,7 @@ const CodeBuddyExternalAuthPlugin = async (_input) => {
                     label: "IOA 登录 (浏览器)",
                     type: "oauth",
                     async authorize() {
-                        // 关键修改：从服务端获取 state，而不是客户端生成
-                        // 这与 codebuddy CLI 的 /login 命令行为一致
+                        // 从服务端获取 state（服务端生成，非客户端）
                         const authState = await requestAuthState();
                         const expiresAt = Date.now() + 10 * 60 * 1000; // 10 minutes
                         return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-codebuddy-external-auth",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "OpenCode plugin for CodeBuddy External (IOA) authentication",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",