Something went wrong. Try again.
fork of prime agent with changes i want but are not upstreamable probqbly (and some fixes)
Something went wrong. Try again.
9.5 kB · 304 lines
TypeScript
at main
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305import { afterEach, describe, expect, it, vi } from "vitest";import { loginAnthropic, refreshAnthropicToken } from "../src/utils/oauth/anthropic.js";import { loginGitHubCopilot } from "../src/utils/oauth/github-copilot.js";import { refreshOpenAICodexToken } from "../src/utils/oauth/openai-codex.js";
function jsonResponse(body: unknown, status: number = 200): Response { return new Response(JSON.stringify(body), { status, headers: { "Content-Type": "application/json", }, });}
function getUrl(input: unknown): string { if (typeof input === "string") { return input; } if (input instanceof URL) { return input.toString(); } if (input instanceof Request) { return input.url; } throw new Error(`Unsupported fetch input: ${String(input)}`);}
describe("GitHub Copilot OAuth device flow", () => { afterEach(() => { vi.unstubAllGlobals(); vi.useRealTimers(); });
it("waits before the first poll and increases the safety margin after slow_down", async () => { vi.useFakeTimers(); const startTime = new Date("2026-03-09T00:00:00Z"); vi.setSystemTime(startTime);
const accessTokenPollTimes: number[] = []; const accessTokenResponses = [ jsonResponse({ error: "authorization_pending", error_description: "pending" }), jsonResponse({ error: "slow_down", error_description: "slow down", interval: 10 }), jsonResponse({ access_token: "ghu_refresh_token" }), ];
const fetchMock = vi.fn(async (input: unknown, init?: RequestInit): Promise<Response> => { const url = getUrl(input);
if (url.endsWith("/login/device/code")) { expect(init?.method).toBe("POST"); expect(init?.headers).toMatchObject({ Accept: "application/json", "Content-Type": "application/x-www-form-urlencoded", }); expect(String(init?.body)).toContain("client_id="); expect(String(init?.body)).toContain("scope=read%3Auser"); return jsonResponse({ device_code: "device-code", user_code: "ABCD-EFGH", verification_uri: "https://github.com/login/device", interval: 5, expires_in: 900, }); }
if (url.endsWith("/login/oauth/access_token")) { accessTokenPollTimes.push(Date.now()); expect(init?.method).toBe("POST"); expect(init?.headers).toMatchObject({ Accept: "application/json", "Content-Type": "application/x-www-form-urlencoded", }); expect(String(init?.body)).toContain("client_id="); expect(String(init?.body)).toContain("device_code=device-code"); expect(String(init?.body)).toContain("grant_type=urn%3Aietf%3Aparams%3Aoauth%3Agrant-type%3Adevice_code"); const response = accessTokenResponses.shift(); if (!response) { throw new Error("Unexpected extra access token poll"); } return response; }
if (url.includes("/copilot_internal/v2/token")) { return jsonResponse({ token: "tid=test;exp=9999999999;proxy-ep=proxy.individual.githubcopilot.com;", expires_at: 9999999999, }); }
if (url.includes("/models/") && url.endsWith("/policy")) { return new Response("", { status: 200 }); }
throw new Error(`Unexpected fetch URL: ${url}`); });
vi.stubGlobal("fetch", fetchMock);
const loginPromise = loginGitHubCopilot({ onAuth: () => {}, onPrompt: async () => "", onProgress: () => {}, });
await vi.advanceTimersByTimeAsync(0); expect(accessTokenPollTimes).toHaveLength(0);
await vi.advanceTimersByTimeAsync(5999); expect(accessTokenPollTimes).toHaveLength(0);
await vi.advanceTimersByTimeAsync(1); expect(accessTokenPollTimes).toHaveLength(1);
await vi.advanceTimersByTimeAsync(5999); expect(accessTokenPollTimes).toHaveLength(1);
await vi.advanceTimersByTimeAsync(1); expect(accessTokenPollTimes).toHaveLength(2);
await vi.advanceTimersByTimeAsync(13999); expect(accessTokenPollTimes).toHaveLength(2);
await vi.advanceTimersByTimeAsync(1); await loginPromise;
expect(accessTokenPollTimes).toEqual([ startTime.getTime() + 6000, startTime.getTime() + 12000, startTime.getTime() + 26000, ]); });
it("uses the remaining lifetime for a final poll before timing out after repeated slow_down responses", async () => { vi.useFakeTimers(); const startTime = new Date("2026-03-09T00:00:00Z"); vi.setSystemTime(startTime);
const accessTokenPollTimes: number[] = []; const accessTokenResponses = [ jsonResponse({ error: "slow_down", error_description: "slow down", interval: 10 }), jsonResponse({ error: "slow_down", error_description: "still too fast", interval: 15 }), jsonResponse({ error: "authorization_pending", error_description: "pending" }), ];
const fetchMock = vi.fn(async (input: unknown): Promise<Response> => { const url = getUrl(input);
if (url.endsWith("/login/device/code")) { return jsonResponse({ device_code: "device-code", user_code: "ABCD-EFGH", verification_uri: "https://github.com/login/device", interval: 5, expires_in: 25, }); }
if (url.endsWith("/login/oauth/access_token")) { accessTokenPollTimes.push(Date.now()); const response = accessTokenResponses.shift(); if (!response) { throw new Error("Unexpected extra access token poll"); } return response; }
throw new Error(`Unexpected fetch URL: ${url}`); });
vi.stubGlobal("fetch", fetchMock);
const loginPromise = loginGitHubCopilot({ onAuth: () => {}, onPrompt: async () => "", }); const rejection = expect(loginPromise).rejects.toThrow( /Device flow timed out after one or more slow_down responses/, );
await vi.advanceTimersByTimeAsync(6000); expect(accessTokenPollTimes).toEqual([startTime.getTime() + 6000]);
await vi.advanceTimersByTimeAsync(14000); expect(accessTokenPollTimes).toEqual([startTime.getTime() + 6000, startTime.getTime() + 20000]);
await vi.advanceTimersByTimeAsync(4999); expect(accessTokenPollTimes).toEqual([startTime.getTime() + 6000, startTime.getTime() + 20000]);
await vi.advanceTimersByTimeAsync(1); await rejection;
expect(accessTokenPollTimes).toEqual([ startTime.getTime() + 6000, startTime.getTime() + 20000, startTime.getTime() + 25000, ]); });});
function getJsonBody(init?: RequestInit): Record<string, string> { if (typeof init?.body !== "string") { throw new Error(`Expected string request body, got ${typeof init?.body}`); } return JSON.parse(init.body) as Record<string, string>;}
describe.sequential("Anthropic OAuth", () => { afterEach(() => { vi.unstubAllGlobals(); });
it("keeps the localhost redirect_uri for manual callback login", async () => { let authUrl = ""; const requests: Record<string, string>[] = []; vi.stubGlobal( "fetch", vi.fn(async (input: unknown, init?: RequestInit): Promise<Response> => { expect(getUrl(input)).toBe("https://platform.claude.com/v1/oauth/token"); expect(init?.method).toBe("POST"); requests.push(getJsonBody(init)); return jsonResponse({ access_token: "access-token", refresh_token: "refresh-token", expires_in: 3600 }); }), );
const credentials = await loginAnthropic({ onAuth: (info) => { authUrl = info.url; }, onPrompt: async () => "", onManualCodeInput: async () => { const url = new URL(authUrl); const state = url.searchParams.get("state"); const redirectUri = url.searchParams.get("redirect_uri"); if (!state || !redirectUri) throw new Error("Missing OAuth state or redirect_uri in auth URL"); return `${redirectUri}?code=manual-code&state=${state}`; }, });
expect(requests).toHaveLength(1); expect(requests[0]).toMatchObject({ grant_type: "authorization_code", code: "manual-code", redirect_uri: "http://localhost:53692/callback", }); expect(credentials.access).toBe("access-token"); expect(credentials.refresh).toBe("refresh-token"); });
it("omits scope from refresh token requests", async () => { const requests: Record<string, string>[] = []; vi.stubGlobal( "fetch", vi.fn(async (input: unknown, init?: RequestInit): Promise<Response> => { expect(getUrl(input)).toBe("https://platform.claude.com/v1/oauth/token"); requests.push(getJsonBody(init)); return jsonResponse({ access_token: "new-access-token", refresh_token: "new-refresh-token", expires_in: 3600, }); }), );
const credentials = await refreshAnthropicToken("refresh-token");
expect(requests).toHaveLength(1); expect(requests[0]).toMatchObject({ grant_type: "refresh_token", refresh_token: "refresh-token" }); expect(requests[0].client_id).toBeTruthy(); expect(requests[0]).not.toHaveProperty("scope"); expect(credentials.access).toBe("new-access-token"); expect(credentials.refresh).toBe("new-refresh-token"); });});
describe("OpenAI Codex OAuth", () => { afterEach(() => { vi.restoreAllMocks(); vi.unstubAllGlobals(); });
it("does not write token refresh failures to stderr", async () => { const consoleError = vi.spyOn(console, "error").mockImplementation(() => {}); vi.stubGlobal( "fetch", vi.fn( async (): Promise<Response> => jsonResponse( { error: { message: "Could not validate your token. Please try signing in again.", type: "invalid_request_error", }, }, 401, ), ), );
await expect(refreshOpenAICodexToken("invalid-refresh-token")).rejects.toThrow( /OpenAI Codex token refresh failed \(401\).*Could not validate your token/, ); expect(consoleError).not.toHaveBeenCalled(); });});