alexion
4def357d09
Imported as a linear vendor commit so forge rebases do not replay the upstream root tree. git-subtree-dir: third_party/pi git-subtree-split: d981de1229ef899957bbe968bc8dcda02a21f477
60 lines
2.0 KiB
TypeScript
60 lines
2.0 KiB
TypeScript
import type { ApiKeyAuth, OAuthAuth } from "./types.ts";
|
|
|
|
/**
|
|
* Standard api-key auth: a stored credential key wins, otherwise the first
|
|
* set env var resolves. Includes a `login` that prompts for the key.
|
|
* Providers with non-standard resolution (provider env, ambient files, IAM)
|
|
* write their own `ApiKeyAuth`.
|
|
*/
|
|
export function envApiKeyAuth(name: string, envVars: readonly string[]): ApiKeyAuth {
|
|
return {
|
|
name,
|
|
login: async (interaction) => {
|
|
interaction.signal.throwIfAborted();
|
|
const key = await interaction.prompt({ type: "secret", message: `Enter ${name}` });
|
|
interaction.signal.throwIfAborted();
|
|
return { type: "api_key", key };
|
|
},
|
|
resolve: async ({ ctx, credential, signal }) => {
|
|
signal.throwIfAborted();
|
|
if (credential?.key) {
|
|
return { auth: { apiKey: credential.key }, env: credential.env, source: "stored credential" };
|
|
}
|
|
for (const envVar of envVars) {
|
|
const value = await ctx.env(envVar);
|
|
signal.throwIfAborted();
|
|
if (value) return { auth: { apiKey: value }, source: envVar };
|
|
}
|
|
return undefined;
|
|
},
|
|
};
|
|
}
|
|
|
|
/**
|
|
* Wraps a dynamically imported `OAuthAuth` so provider definitions can
|
|
* advertise OAuth without importing the implementation. The flow loads on
|
|
* first `login`/`refresh`/`toAuth` call; callers keep Node-only flow code out
|
|
* of bundles by loading through a bundler-opaque dynamic import (variable
|
|
* specifier, see the bedrock lazy wrapper).
|
|
*/
|
|
export function lazyOAuth(input: {
|
|
name: string;
|
|
isSubscription?: boolean;
|
|
loginLabel?: string;
|
|
load: () => Promise<OAuthAuth>;
|
|
}): OAuthAuth {
|
|
let promise: Promise<OAuthAuth> | undefined;
|
|
const loaded = () => {
|
|
promise ??= input.load();
|
|
return promise;
|
|
};
|
|
return {
|
|
name: input.name,
|
|
isSubscription: input.isSubscription,
|
|
loginLabel: input.loginLabel,
|
|
login: async (interaction) => (await loaded()).login(interaction),
|
|
refresh: async (credential, signal) => (await loaded()).refresh(credential, signal),
|
|
toAuth: async (credential) => (await loaded()).toAuth(credential),
|
|
};
|
|
}
|