49 lines
1.6 KiB
TypeScript
49 lines
1.6 KiB
TypeScript
export * as ServerAuth from "./auth"
|
|
|
|
import { ConfigService } from "@/effect/config-service"
|
|
import { Flag } from "@opencode-ai/core/flag/flag"
|
|
import { Config as EffectConfig, Context, Option, Redacted } from "effect"
|
|
|
|
export type Credentials = {
|
|
password?: string
|
|
username?: string
|
|
}
|
|
|
|
export type DecodedCredentials = {
|
|
readonly username: string
|
|
readonly password: Redacted.Redacted
|
|
}
|
|
|
|
export class Config extends ConfigService.Service<Config>()("@opencode/ServerAuthConfig", {
|
|
password: EffectConfig.string("OPENCODE_SERVER_PASSWORD").pipe(EffectConfig.option),
|
|
username: EffectConfig.string("OPENCODE_SERVER_USERNAME").pipe(EffectConfig.withDefault("opencode")),
|
|
}) {}
|
|
|
|
export type Info = Context.Service.Shape<typeof Config>
|
|
|
|
export function required(config: Info) {
|
|
return Option.isSome(config.password) && config.password.value !== ""
|
|
}
|
|
|
|
export function authorized(credentials: DecodedCredentials, config: Info) {
|
|
return (
|
|
Option.isSome(config.password) &&
|
|
credentials.username === config.username &&
|
|
Redacted.value(credentials.password) === config.password.value
|
|
)
|
|
}
|
|
|
|
export function header(credentials?: Credentials) {
|
|
const password = credentials?.password ?? Flag.OPENCODE_SERVER_PASSWORD
|
|
if (!password) return undefined
|
|
|
|
const username = credentials?.username ?? Flag.OPENCODE_SERVER_USERNAME ?? "opencode"
|
|
return `Basic ${Buffer.from(`${username}:${password}`).toString("base64")}`
|
|
}
|
|
|
|
export function headers(credentials?: Credentials) {
|
|
const authorization = header(credentials)
|
|
if (!authorization) return undefined
|
|
return { Authorization: authorization }
|
|
}
|