40634138bc
Adds cookie-based login with a bootstrap token flow for desktop apps, secures OpenCode instance traffic with per-instance Basic auth, and updates UI/plugin clients to use credentials.
33 lines
773 B
TypeScript
33 lines
773 B
TypeScript
import crypto from "crypto"
|
|
|
|
export interface BootstrapToken {
|
|
token: string
|
|
createdAt: number
|
|
consumed: boolean
|
|
}
|
|
|
|
export class TokenManager {
|
|
private token: BootstrapToken | null = null
|
|
|
|
constructor(private readonly ttlMs: number) {}
|
|
|
|
generate(): string {
|
|
const token = crypto.randomBytes(32).toString("base64url")
|
|
this.token = { token, createdAt: Date.now(), consumed: false }
|
|
return token
|
|
}
|
|
|
|
consume(token: string): boolean {
|
|
if (!this.token) return false
|
|
if (this.token.consumed) return false
|
|
if (Date.now() - this.token.createdAt > this.ttlMs) return false
|
|
if (token !== this.token.token) return false
|
|
this.token.consumed = true
|
|
return true
|
|
}
|
|
|
|
peek(): string | null {
|
|
return this.token?.token ?? null
|
|
}
|
|
}
|