mirror of
https://github.com/router-for-me/CLIProxyAPI.git
synced 2026-03-01 02:46:40 +08:00
93 lines
3.3 KiB
Go
93 lines
3.3 KiB
Go
// Package codex provides authentication and token management functionality
|
|
// for OpenAI's Codex AI services. It handles OAuth2 token storage, serialization,
|
|
// and retrieval for maintaining authenticated sessions with the Codex API.
|
|
package codex
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
"os"
|
|
"path/filepath"
|
|
|
|
"github.com/router-for-me/CLIProxyAPI/v6/internal/misc"
|
|
)
|
|
|
|
// CodexTokenStorage stores OAuth2 token information for OpenAI Codex API authentication.
|
|
// It maintains compatibility with the existing auth system while adding Codex-specific fields
|
|
// for managing access tokens, refresh tokens, and user account information.
|
|
type CodexTokenStorage struct {
|
|
// IDToken is the JWT ID token containing user claims and identity information.
|
|
IDToken string `json:"id_token"`
|
|
// AccessToken is the OAuth2 access token used for authenticating API requests.
|
|
AccessToken string `json:"access_token"`
|
|
// RefreshToken is used to obtain new access tokens when the current one expires.
|
|
RefreshToken string `json:"refresh_token"`
|
|
// AccountID is the OpenAI account identifier associated with this token.
|
|
AccountID string `json:"account_id"`
|
|
// LastRefresh is the timestamp of the last token refresh operation.
|
|
LastRefresh string `json:"last_refresh"`
|
|
// Email is the OpenAI account email address associated with this token.
|
|
Email string `json:"email"`
|
|
// Type indicates the authentication provider type, always "codex" for this storage.
|
|
Type string `json:"type"`
|
|
// Expire is the timestamp when the current access token expires.
|
|
Expire string `json:"expired"`
|
|
|
|
// Metadata holds arbitrary key-value pairs injected via hooks.
|
|
// It is not exported to JSON directly to allow flattening during serialization.
|
|
Metadata map[string]any `json:"-"`
|
|
}
|
|
|
|
// SetMetadata allows external callers to inject metadata into the storage before saving.
|
|
func (ts *CodexTokenStorage) SetMetadata(meta map[string]any) {
|
|
ts.Metadata = meta
|
|
}
|
|
|
|
// SaveTokenToFile serializes the Codex token storage to a JSON file.
|
|
// This method creates the necessary directory structure and writes the token
|
|
// data in JSON format to the specified file path for persistent storage.
|
|
// It merges any injected metadata into the top-level JSON object.
|
|
//
|
|
// Parameters:
|
|
// - authFilePath: The full path where the token file should be saved
|
|
//
|
|
// Returns:
|
|
// - error: An error if the operation fails, nil otherwise
|
|
func (ts *CodexTokenStorage) SaveTokenToFile(authFilePath string) error {
|
|
misc.LogSavingCredentials(authFilePath)
|
|
ts.Type = "codex"
|
|
if err := os.MkdirAll(filepath.Dir(authFilePath), 0700); err != nil {
|
|
return fmt.Errorf("failed to create directory: %v", err)
|
|
}
|
|
|
|
f, err := os.Create(authFilePath)
|
|
if err != nil {
|
|
return fmt.Errorf("failed to create token file: %w", err)
|
|
}
|
|
defer func() {
|
|
_ = f.Close()
|
|
}()
|
|
|
|
// Convert struct to map for merging
|
|
data := make(map[string]any)
|
|
temp, errJson := json.Marshal(ts)
|
|
if errJson != nil {
|
|
return fmt.Errorf("failed to marshal struct: %w", errJson)
|
|
}
|
|
if errUnmarshal := json.Unmarshal(temp, &data); errUnmarshal != nil {
|
|
return fmt.Errorf("failed to unmarshal struct map: %w", errUnmarshal)
|
|
}
|
|
|
|
// Merge extra metadata
|
|
if ts.Metadata != nil {
|
|
for k, v := range ts.Metadata {
|
|
data[k] = v
|
|
}
|
|
}
|
|
|
|
if err = json.NewEncoder(f).Encode(data); err != nil {
|
|
return fmt.Errorf("failed to write token to file: %w", err)
|
|
}
|
|
return nil
|
|
}
|