mirror of
https://github.com/githubhjs/CLIProxyAPIPlus.git
synced 2026-07-12 01:25:13 +00:00
Merge branch 'main' into v6.5.32
This commit is contained in:
Luis Pater
@@ -7,7 +7,7 @@ on:
|
|||||||
|
|
||||||
env:
|
env:
|
||||||
APP_NAME: CLIProxyAPI
|
APP_NAME: CLIProxyAPI
|
||||||
DOCKERHUB_REPO: eceasy/cli-proxy-api
|
DOCKERHUB_REPO: eceasy/cli-proxy-api-plus
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
docker:
|
docker:
|
||||||
|
|||||||
@@ -23,7 +23,8 @@ jobs:
|
|||||||
cache: true
|
cache: true
|
||||||
- name: Generate Build Metadata
|
- name: Generate Build Metadata
|
||||||
run: |
|
run: |
|
||||||
echo VERSION=`git describe --tags --always --dirty` >> $GITHUB_ENV
|
VERSION=$(git describe --tags --always --dirty)
|
||||||
|
echo "VERSION=${VERSION}" >> $GITHUB_ENV
|
||||||
echo COMMIT=`git rev-parse --short HEAD` >> $GITHUB_ENV
|
echo COMMIT=`git rev-parse --short HEAD` >> $GITHUB_ENV
|
||||||
echo BUILD_DATE=`date -u +%Y-%m-%dT%H:%M:%SZ` >> $GITHUB_ENV
|
echo BUILD_DATE=`date -u +%Y-%m-%dT%H:%M:%SZ` >> $GITHUB_ENV
|
||||||
- uses: goreleaser/goreleaser-action@v4
|
- uses: goreleaser/goreleaser-action@v4
|
||||||
|
|||||||
+4
-4
@@ -1,5 +1,5 @@
|
|||||||
builds:
|
builds:
|
||||||
- id: "cli-proxy-api"
|
- id: "cli-proxy-api-plus"
|
||||||
env:
|
env:
|
||||||
- CGO_ENABLED=0
|
- CGO_ENABLED=0
|
||||||
goos:
|
goos:
|
||||||
@@ -10,11 +10,11 @@ builds:
|
|||||||
- amd64
|
- amd64
|
||||||
- arm64
|
- arm64
|
||||||
main: ./cmd/server/
|
main: ./cmd/server/
|
||||||
binary: cli-proxy-api
|
binary: cli-proxy-api-plus
|
||||||
ldflags:
|
ldflags:
|
||||||
- -s -w -X 'main.Version={{.Version}}' -X 'main.Commit={{.ShortCommit}}' -X 'main.BuildDate={{.Date}}'
|
- -s -w -X 'main.Version={{.Version}}-plus' -X 'main.Commit={{.ShortCommit}}' -X 'main.BuildDate={{.Date}}'
|
||||||
archives:
|
archives:
|
||||||
- id: "cli-proxy-api"
|
- id: "cli-proxy-api-plus"
|
||||||
format: tar.gz
|
format: tar.gz
|
||||||
format_overrides:
|
format_overrides:
|
||||||
- goos: windows
|
- goos: windows
|
||||||
|
|||||||
+3
-3
@@ -12,7 +12,7 @@ ARG VERSION=dev
|
|||||||
ARG COMMIT=none
|
ARG COMMIT=none
|
||||||
ARG BUILD_DATE=unknown
|
ARG BUILD_DATE=unknown
|
||||||
|
|
||||||
RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-s -w -X 'main.Version=${VERSION}' -X 'main.Commit=${COMMIT}' -X 'main.BuildDate=${BUILD_DATE}'" -o ./CLIProxyAPI ./cmd/server/
|
RUN CGO_ENABLED=0 GOOS=linux go build -ldflags="-s -w -X 'main.Version=${VERSION}-plus' -X 'main.Commit=${COMMIT}' -X 'main.BuildDate=${BUILD_DATE}'" -o ./CLIProxyAPIPlus ./cmd/server/
|
||||||
|
|
||||||
FROM alpine:3.22.0
|
FROM alpine:3.22.0
|
||||||
|
|
||||||
@@ -20,7 +20,7 @@ RUN apk add --no-cache tzdata
|
|||||||
|
|
||||||
RUN mkdir /CLIProxyAPI
|
RUN mkdir /CLIProxyAPI
|
||||||
|
|
||||||
COPY --from=builder ./app/CLIProxyAPI /CLIProxyAPI/CLIProxyAPI
|
COPY --from=builder ./app/CLIProxyAPIPlus /CLIProxyAPI/CLIProxyAPIPlus
|
||||||
|
|
||||||
COPY config.example.yaml /CLIProxyAPI/config.example.yaml
|
COPY config.example.yaml /CLIProxyAPI/config.example.yaml
|
||||||
|
|
||||||
@@ -32,4 +32,4 @@ ENV TZ=Asia/Shanghai
|
|||||||
|
|
||||||
RUN cp /usr/share/zoneinfo/${TZ} /etc/localtime && echo "${TZ}" > /etc/timezone
|
RUN cp /usr/share/zoneinfo/${TZ} /etc/localtime && echo "${TZ}" > /etc/timezone
|
||||||
|
|
||||||
CMD ["./CLIProxyAPI"]
|
CMD ["./CLIProxyAPIPlus"]
|
||||||
@@ -1,102 +1,22 @@
|
|||||||
# CLI Proxy API
|
# CLIProxyAPI Plus
|
||||||
|
|
||||||
English | [中文](README_CN.md)
|
English | [Chinese](README_CN.md)
|
||||||
|
|
||||||
A proxy server that provides OpenAI/Gemini/Claude/Codex compatible API interfaces for CLI.
|
This is the Plus version of [CLIProxyAPI](https://github.com/router-for-me/CLIProxyAPI), adding support for third-party providers on top of the mainline project.
|
||||||
|
|
||||||
It now also supports OpenAI Codex (GPT models) and Claude Code via OAuth.
|
All third-party provider support is maintained by community contributors; CLIProxyAPI does not provide technical support. Please contact the corresponding community maintainer if you need assistance.
|
||||||
|
|
||||||
So you can use local or multi-account CLI access with OpenAI(include Responses)/Gemini/Claude-compatible clients and SDKs.
|
The Plus release stays in lockstep with the mainline features.
|
||||||
|
|
||||||
## Sponsor
|
## Differences from the Mainline
|
||||||
|
|
||||||
[](https://z.ai/subscribe?ic=8JVLJQFSKB)
|
- Added GitHub Copilot support (OAuth login), provided by [em4gp](https://github.com/em4go/CLIProxyAPI/tree/feature/github-copilot-auth)
|
||||||
|
|
||||||
This project is sponsored by Z.ai, supporting us with their GLM CODING PLAN.
|
|
||||||
|
|
||||||
GLM CODING PLAN is a subscription service designed for AI coding, starting at just $3/month. It provides access to their flagship GLM-4.6 model across 10+ popular AI coding tools (Claude Code, Cline, Roo Code, etc.), offering developers top-tier, fast, and stable coding experiences.
|
|
||||||
|
|
||||||
Get 10% OFF GLM CODING PLAN：https://z.ai/subscribe?ic=8JVLJQFSKB
|
|
||||||
|
|
||||||
## Overview
|
|
||||||
|
|
||||||
- OpenAI/Gemini/Claude compatible API endpoints for CLI models
|
|
||||||
- OpenAI Codex support (GPT models) via OAuth login
|
|
||||||
- Claude Code support via OAuth login
|
|
||||||
- Qwen Code support via OAuth login
|
|
||||||
- iFlow support via OAuth login
|
|
||||||
- Amp CLI and IDE extensions support with provider routing
|
|
||||||
- Streaming and non-streaming responses
|
|
||||||
- Function calling/tools support
|
|
||||||
- Multimodal input support (text and images)
|
|
||||||
- Multiple accounts with round-robin load balancing (Gemini, OpenAI, Claude, Qwen and iFlow)
|
|
||||||
- Simple CLI authentication flows (Gemini, OpenAI, Claude, Qwen and iFlow)
|
|
||||||
- Generative Language API Key support
|
|
||||||
- AI Studio Build multi-account load balancing
|
|
||||||
- Gemini CLI multi-account load balancing
|
|
||||||
- Claude Code multi-account load balancing
|
|
||||||
- Qwen Code multi-account load balancing
|
|
||||||
- iFlow multi-account load balancing
|
|
||||||
- OpenAI Codex multi-account load balancing
|
|
||||||
- OpenAI-compatible upstream providers via config (e.g., OpenRouter)
|
|
||||||
- Reusable Go SDK for embedding the proxy (see `docs/sdk-usage.md`)
|
|
||||||
|
|
||||||
## Getting Started
|
|
||||||
|
|
||||||
CLIProxyAPI Guides: [https://help.router-for.me/](https://help.router-for.me/)
|
|
||||||
|
|
||||||
## Management API
|
|
||||||
|
|
||||||
see [MANAGEMENT_API.md](https://help.router-for.me/management/api)
|
|
||||||
|
|
||||||
## Amp CLI Support
|
|
||||||
|
|
||||||
CLIProxyAPI includes integrated support for [Amp CLI](https://ampcode.com) and Amp IDE extensions, enabling you to use your Google/ChatGPT/Claude OAuth subscriptions with Amp's coding tools:
|
|
||||||
|
|
||||||
- Provider route aliases for Amp's API patterns (`/api/provider/{provider}/v1...`)
|
|
||||||
- Management proxy for OAuth authentication and account features
|
|
||||||
- Smart model fallback with automatic routing
|
|
||||||
- **Model mapping** to route unavailable models to alternatives (e.g., `claude-opus-4.5` → `claude-sonnet-4`)
|
|
||||||
- Security-first design with localhost-only management endpoints
|
|
||||||
|
|
||||||
**→ [Complete Amp CLI Integration Guide](docs/amp-cli-integration.md)**
|
|
||||||
|
|
||||||
## SDK Docs
|
|
||||||
|
|
||||||
- Usage: [docs/sdk-usage.md](docs/sdk-usage.md)
|
|
||||||
- Advanced (executors & translators): [docs/sdk-advanced.md](docs/sdk-advanced.md)
|
|
||||||
- Access: [docs/sdk-access.md](docs/sdk-access.md)
|
|
||||||
- Watcher: [docs/sdk-watcher.md](docs/sdk-watcher.md)
|
|
||||||
- Custom Provider Example: `examples/custom-provider`
|
|
||||||
|
|
||||||
## Contributing
|
## Contributing
|
||||||
|
|
||||||
Contributions are welcome! Please feel free to submit a Pull Request.
|
This project only accepts pull requests that relate to third-party provider support. Any pull requests unrelated to third-party provider support will be rejected.
|
||||||
|
|
||||||
1. Fork the repository
|
If you need to submit any non-third-party provider changes, please open them against the mainline repository.
|
||||||
2. Create your feature branch (`git checkout -b feature/amazing-feature`)
|
|
||||||
3. Commit your changes (`git commit -m 'Add some amazing feature'`)
|
|
||||||
4. Push to the branch (`git push origin feature/amazing-feature`)
|
|
||||||
5. Open a Pull Request
|
|
||||||
|
|
||||||
## Who is with us?
|
|
||||||
|
|
||||||
Those projects are based on CLIProxyAPI:
|
|
||||||
|
|
||||||
### [vibeproxy](https://github.com/automazeio/vibeproxy)
|
|
||||||
|
|
||||||
Native macOS menu bar app to use your Claude Code & ChatGPT subscriptions with AI coding tools - no API keys needed
|
|
||||||
|
|
||||||
### [Subtitle Translator](https://github.com/VjayC/SRT-Subtitle-Translator-Validator)
|
|
||||||
|
|
||||||
Browser-based tool to translate SRT subtitles using your Gemini subscription via CLIProxyAPI with automatic validation/error correction - no API keys needed
|
|
||||||
|
|
||||||
### [CCS (Claude Code Switch)](https://github.com/kaitranntt/ccs)
|
|
||||||
|
|
||||||
CLI wrapper for instant switching between multiple Claude accounts and alternative models (Gemini, Codex, Antigravity) via CLIProxyAPI OAuth - no API keys needed
|
|
||||||
|
|
||||||
> [!NOTE]
|
|
||||||
> If you developed a project based on CLIProxyAPI, please open a PR to add it to this list.
|
|
||||||
|
|
||||||
## License
|
## License
|
||||||
|
|
||||||
|
|||||||
+9
-95
@@ -1,109 +1,23 @@
|
|||||||
# CLI 代理 API
|
# CLIProxyAPI Plus
|
||||||
|
|
||||||
[English](README.md) | 中文
|
[English](README.md) | 中文
|
||||||
|
|
||||||
一个为 CLI 提供 OpenAI/Gemini/Claude/Codex 兼容 API 接口的代理服务器。
|
这是 [CLIProxyAPI](https://github.com/router-for-me/CLIProxyAPI) 的 Plus 版本，在原有基础上增加了第三方供应商的支持。
|
||||||
|
|
||||||
现已支持通过 OAuth 登录接入 OpenAI Codex（GPT 系列）和 Claude Code。
|
所有的第三方供应商支持都由第三方社区维护者提供，CLIProxyAPI 不提供技术支持。如需取得支持，请与对应的社区维护者联系。
|
||||||
|
|
||||||
您可以使用本地或多账户的CLI方式，通过任何与 OpenAI（包括Responses）/Gemini/Claude 兼容的客户端和SDK进行访问。
|
该 Plus 版本的主线功能与主线功能强制同步。
|
||||||
|
|
||||||
## 赞助商
|
## 与主线版本版本差异
|
||||||
|
|
||||||
[](https://www.bigmodel.cn/claude-code?ic=RRVJPB5SII)
|
- 新增 GitHub Copilot 支持（OAuth 登录），由[em4gp](https://github.com/em4go/CLIProxyAPI/tree/feature/github-copilot-auth)提供
|
||||||
|
|
||||||
本项目由 Z智谱 提供赞助, 他们通过 GLM CODING PLAN 对本项目提供技术支持。
|
|
||||||
|
|
||||||
GLM CODING PLAN 是专为AI编码打造的订阅套餐，每月最低仅需20元，即可在十余款主流AI编码工具如 Claude Code、Cline、Roo Code 中畅享智谱旗舰模型GLM-4.6，为开发者提供顶尖的编码体验。
|
|
||||||
|
|
||||||
智谱AI为本软件提供了特别优惠，使用以下链接购买可以享受九折优惠：https://www.bigmodel.cn/claude-code?ic=RRVJPB5SII
|
|
||||||
|
|
||||||
## 功能特性
|
|
||||||
|
|
||||||
- 为 CLI 模型提供 OpenAI/Gemini/Claude/Codex 兼容的 API 端点
|
|
||||||
- 新增 OpenAI Codex（GPT 系列）支持（OAuth 登录）
|
|
||||||
- 新增 Claude Code 支持（OAuth 登录）
|
|
||||||
- 新增 Qwen Code 支持（OAuth 登录）
|
|
||||||
- 新增 iFlow 支持（OAuth 登录）
|
|
||||||
- 支持流式与非流式响应
|
|
||||||
- 函数调用/工具支持
|
|
||||||
- 多模态输入（文本、图片）
|
|
||||||
- 多账户支持与轮询负载均衡（Gemini、OpenAI、Claude、Qwen 与 iFlow）
|
|
||||||
- 简单的 CLI 身份验证流程（Gemini、OpenAI、Claude、Qwen 与 iFlow）
|
|
||||||
- 支持 Gemini AIStudio API 密钥
|
|
||||||
- 支持 AI Studio Build 多账户轮询
|
|
||||||
- 支持 Gemini CLI 多账户轮询
|
|
||||||
- 支持 Claude Code 多账户轮询
|
|
||||||
- 支持 Qwen Code 多账户轮询
|
|
||||||
- 支持 iFlow 多账户轮询
|
|
||||||
- 支持 OpenAI Codex 多账户轮询
|
|
||||||
- 通过配置接入上游 OpenAI 兼容提供商（例如 OpenRouter）
|
|
||||||
- 可复用的 Go SDK（见 `docs/sdk-usage_CN.md`）
|
|
||||||
|
|
||||||
## 新手入门
|
|
||||||
|
|
||||||
CLIProxyAPI 用户手册： [https://help.router-for.me/](https://help.router-for.me/cn/)
|
|
||||||
|
|
||||||
## 管理 API 文档
|
|
||||||
|
|
||||||
请参见 [MANAGEMENT_API_CN.md](https://help.router-for.me/cn/management/api)
|
|
||||||
|
|
||||||
## Amp CLI 支持
|
|
||||||
|
|
||||||
CLIProxyAPI 已内置对 [Amp CLI](https://ampcode.com) 和 Amp IDE 扩展的支持，可让你使用自己的 Google/ChatGPT/Claude OAuth 订阅来配合 Amp 编码工具：
|
|
||||||
|
|
||||||
- 提供商路由别名，兼容 Amp 的 API 路径模式（`/api/provider/{provider}/v1...`）
|
|
||||||
- 管理代理，处理 OAuth 认证和账号功能
|
|
||||||
- 智能模型回退与自动路由
|
|
||||||
- 以安全为先的设计，管理端点仅限 localhost
|
|
||||||
|
|
||||||
**→ [Amp CLI 完整集成指南](docs/amp-cli-integration_CN.md)**
|
|
||||||
|
|
||||||
## SDK 文档
|
|
||||||
|
|
||||||
- 使用文档：[docs/sdk-usage_CN.md](docs/sdk-usage_CN.md)
|
|
||||||
- 高级（执行器与翻译器）：[docs/sdk-advanced_CN.md](docs/sdk-advanced_CN.md)
|
|
||||||
- 认证: [docs/sdk-access_CN.md](docs/sdk-access_CN.md)
|
|
||||||
- 凭据加载/更新: [docs/sdk-watcher_CN.md](docs/sdk-watcher_CN.md)
|
|
||||||
- 自定义 Provider 示例：`examples/custom-provider`
|
|
||||||
|
|
||||||
## 贡献
|
## 贡献
|
||||||
|
|
||||||
欢迎贡献！请随时提交 Pull Request。
|
该项目仅接受第三方供应商支持的 Pull Request。任何非第三方供应商支持的 Pull Request 都将被拒绝。
|
||||||
|
|
||||||
1. Fork 仓库
|
如果需要提交任何非第三方供应商支持的 Pull Request，请提交到主线版本。
|
||||||
2. 创建您的功能分支（`git checkout -b feature/amazing-feature`）
|
|
||||||
3. 提交您的更改（`git commit -m 'Add some amazing feature'`）
|
|
||||||
4. 推送到分支（`git push origin feature/amazing-feature`）
|
|
||||||
5. 打开 Pull Request
|
|
||||||
|
|
||||||
## 谁与我们在一起？
|
|
||||||
|
|
||||||
这些项目基于 CLIProxyAPI:
|
|
||||||
|
|
||||||
### [vibeproxy](https://github.com/automazeio/vibeproxy)
|
|
||||||
|
|
||||||
一个原生 macOS 菜单栏应用，让您可以使用 Claude Code & ChatGPT 订阅服务和 AI 编程工具，无需 API 密钥。
|
|
||||||
|
|
||||||
### [Subtitle Translator](https://github.com/VjayC/SRT-Subtitle-Translator-Validator)
|
|
||||||
|
|
||||||
一款基于浏览器的 SRT 字幕翻译工具，可通过 CLI 代理 API 使用您的 Gemini 订阅。内置自动验证与错误修正功能，无需 API 密钥。
|
|
||||||
|
|
||||||
### [CCS (Claude Code Switch)](https://github.com/kaitranntt/ccs)
|
|
||||||
|
|
||||||
CLI 封装器，用于通过 CLIProxyAPI OAuth 即时切换多个 Claude 账户和替代模型（Gemini, Codex, Antigravity），无需 API 密钥。
|
|
||||||
|
|
||||||
> [!NOTE]
|
|
||||||
> 如果你开发了基于 CLIProxyAPI 的项目，请提交一个 PR（拉取请求）将其添加到此列表中。
|
|
||||||
|
|
||||||
## 许可证
|
## 许可证
|
||||||
|
|
||||||
此项目根据 MIT 许可证授权 - 有关详细信息，请参阅 [LICENSE](LICENSE) 文件。
|
此项目根据 MIT 许可证授权 - 有关详细信息，请参阅 [LICENSE](LICENSE) 文件。
|
||||||
|
|
||||||
## 写给所有中国网友的
|
|
||||||
|
|
||||||
QQ 群：188637136
|
|
||||||
|
|
||||||
或
|
|
||||||
|
|
||||||
Telegram 群：https://t.me/CLIProxyAPI
|
|
||||||
@@ -62,6 +62,7 @@ func main() {
|
|||||||
var iflowCookie bool
|
var iflowCookie bool
|
||||||
var noBrowser bool
|
var noBrowser bool
|
||||||
var antigravityLogin bool
|
var antigravityLogin bool
|
||||||
|
var githubCopilotLogin bool
|
||||||
var projectID string
|
var projectID string
|
||||||
var vertexImport string
|
var vertexImport string
|
||||||
var configPath string
|
var configPath string
|
||||||
@@ -76,6 +77,7 @@ func main() {
|
|||||||
flag.BoolVar(&iflowCookie, "iflow-cookie", false, "Login to iFlow using Cookie")
|
flag.BoolVar(&iflowCookie, "iflow-cookie", false, "Login to iFlow using Cookie")
|
||||||
flag.BoolVar(&noBrowser, "no-browser", false, "Don't open browser automatically for OAuth")
|
flag.BoolVar(&noBrowser, "no-browser", false, "Don't open browser automatically for OAuth")
|
||||||
flag.BoolVar(&antigravityLogin, "antigravity-login", false, "Login to Antigravity using OAuth")
|
flag.BoolVar(&antigravityLogin, "antigravity-login", false, "Login to Antigravity using OAuth")
|
||||||
|
flag.BoolVar(&githubCopilotLogin, "github-copilot-login", false, "Login to GitHub Copilot using device flow")
|
||||||
flag.StringVar(&projectID, "project_id", "", "Project ID (Gemini only, not required)")
|
flag.StringVar(&projectID, "project_id", "", "Project ID (Gemini only, not required)")
|
||||||
flag.StringVar(&configPath, "config", DefaultConfigPath, "Configure File Path")
|
flag.StringVar(&configPath, "config", DefaultConfigPath, "Configure File Path")
|
||||||
flag.StringVar(&vertexImport, "vertex-import", "", "Import Vertex service account key JSON file")
|
flag.StringVar(&vertexImport, "vertex-import", "", "Import Vertex service account key JSON file")
|
||||||
@@ -436,6 +438,9 @@ func main() {
|
|||||||
} else if antigravityLogin {
|
} else if antigravityLogin {
|
||||||
// Handle Antigravity login
|
// Handle Antigravity login
|
||||||
cmd.DoAntigravityLogin(cfg, options)
|
cmd.DoAntigravityLogin(cfg, options)
|
||||||
|
} else if githubCopilotLogin {
|
||||||
|
// Handle GitHub Copilot login
|
||||||
|
cmd.DoGitHubCopilotLogin(cfg, options)
|
||||||
} else if codexLogin {
|
} else if codexLogin {
|
||||||
// Handle Codex login
|
// Handle Codex login
|
||||||
cmd.DoCodexLogin(cfg, options)
|
cmd.DoCodexLogin(cfg, options)
|
||||||
|
|||||||
+2
-2
@@ -1,6 +1,6 @@
|
|||||||
services:
|
services:
|
||||||
cli-proxy-api:
|
cli-proxy-api:
|
||||||
image: ${CLI_PROXY_IMAGE:-eceasy/cli-proxy-api:latest}
|
image: ${CLI_PROXY_IMAGE:-eceasy/cli-proxy-api-plus:latest}
|
||||||
pull_policy: always
|
pull_policy: always
|
||||||
build:
|
build:
|
||||||
context: .
|
context: .
|
||||||
@@ -9,7 +9,7 @@ services:
|
|||||||
VERSION: ${VERSION:-dev}
|
VERSION: ${VERSION:-dev}
|
||||||
COMMIT: ${COMMIT:-none}
|
COMMIT: ${COMMIT:-none}
|
||||||
BUILD_DATE: ${BUILD_DATE:-unknown}
|
BUILD_DATE: ${BUILD_DATE:-unknown}
|
||||||
container_name: cli-proxy-api
|
container_name: cli-proxy-api-plus
|
||||||
# env_file:
|
# env_file:
|
||||||
# - .env
|
# - .env
|
||||||
environment:
|
environment:
|
||||||
|
|||||||
@@ -0,0 +1,225 @@
|
|||||||
|
// Package copilot provides authentication and token management for GitHub Copilot API.
|
||||||
|
// It handles the OAuth2 device flow for secure authentication with the Copilot API.
|
||||||
|
package copilot
|
||||||
|
|
||||||
|
import (
|
||||||
|
"context"
|
||||||
|
"encoding/json"
|
||||||
|
"fmt"
|
||||||
|
"io"
|
||||||
|
"net/http"
|
||||||
|
"time"
|
||||||
|
|
||||||
|
"github.com/router-for-me/CLIProxyAPI/v6/internal/config"
|
||||||
|
"github.com/router-for-me/CLIProxyAPI/v6/internal/util"
|
||||||
|
log "github.com/sirupsen/logrus"
|
||||||
|
)
|
||||||
|
|
||||||
|
const (
|
||||||
|
// copilotAPITokenURL is the endpoint for getting Copilot API tokens from GitHub token.
|
||||||
|
copilotAPITokenURL = "https://api.github.com/copilot_internal/v2/token"
|
||||||
|
// copilotAPIEndpoint is the base URL for making API requests.
|
||||||
|
copilotAPIEndpoint = "https://api.githubcopilot.com"
|
||||||
|
|
||||||
|
// Common HTTP header values for Copilot API requests.
|
||||||
|
copilotUserAgent = "GithubCopilot/1.0"
|
||||||
|
copilotEditorVersion = "vscode/1.100.0"
|
||||||
|
copilotPluginVersion = "copilot/1.300.0"
|
||||||
|
copilotIntegrationID = "vscode-chat"
|
||||||
|
copilotOpenAIIntent = "conversation-panel"
|
||||||
|
)
|
||||||
|
|
||||||
|
// CopilotAPIToken represents the Copilot API token response.
|
||||||
|
type CopilotAPIToken struct {
|
||||||
|
// Token is the JWT token for authenticating with the Copilot API.
|
||||||
|
Token string `json:"token"`
|
||||||
|
// ExpiresAt is the Unix timestamp when the token expires.
|
||||||
|
ExpiresAt int64 `json:"expires_at"`
|
||||||
|
// Endpoints contains the available API endpoints.
|
||||||
|
Endpoints struct {
|
||||||
|
API string `json:"api"`
|
||||||
|
Proxy string `json:"proxy"`
|
||||||
|
OriginTracker string `json:"origin-tracker"`
|
||||||
|
Telemetry string `json:"telemetry"`
|
||||||
|
} `json:"endpoints,omitempty"`
|
||||||
|
// ErrorDetails contains error information if the request failed.
|
||||||
|
ErrorDetails *struct {
|
||||||
|
URL string `json:"url"`
|
||||||
|
Message string `json:"message"`
|
||||||
|
DocumentationURL string `json:"documentation_url"`
|
||||||
|
} `json:"error_details,omitempty"`
|
||||||
|
}
|
||||||
|
|
||||||
|
// CopilotAuth handles GitHub Copilot authentication flow.
|
||||||
|
// It provides methods for device flow authentication and token management.
|
||||||
|
type CopilotAuth struct {
|
||||||
|
httpClient *http.Client
|
||||||
|
deviceClient *DeviceFlowClient
|
||||||
|
cfg *config.Config
|
||||||
|
}
|
||||||
|
|
||||||
|
// NewCopilotAuth creates a new CopilotAuth service instance.
|
||||||
|
// It initializes an HTTP client with proxy settings from the provided configuration.
|
||||||
|
func NewCopilotAuth(cfg *config.Config) *CopilotAuth {
|
||||||
|
return &CopilotAuth{
|
||||||
|
httpClient: util.SetProxy(&cfg.SDKConfig, &http.Client{Timeout: 30 * time.Second}),
|
||||||
|
deviceClient: NewDeviceFlowClient(cfg),
|
||||||
|
cfg: cfg,
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// StartDeviceFlow initiates the device flow authentication.
|
||||||
|
// Returns the device code response containing the user code and verification URI.
|
||||||
|
func (c *CopilotAuth) StartDeviceFlow(ctx context.Context) (*DeviceCodeResponse, error) {
|
||||||
|
return c.deviceClient.RequestDeviceCode(ctx)
|
||||||
|
}
|
||||||
|
|
||||||
|
// WaitForAuthorization polls for user authorization and returns the auth bundle.
|
||||||
|
func (c *CopilotAuth) WaitForAuthorization(ctx context.Context, deviceCode *DeviceCodeResponse) (*CopilotAuthBundle, error) {
|
||||||
|
tokenData, err := c.deviceClient.PollForToken(ctx, deviceCode)
|
||||||
|
if err != nil {
|
||||||
|
return nil, err
|
||||||
|
}
|
||||||
|
|
||||||
|
// Fetch the GitHub username
|
||||||
|
username, err := c.deviceClient.FetchUserInfo(ctx, tokenData.AccessToken)
|
||||||
|
if err != nil {
|
||||||
|
log.Warnf("copilot: failed to fetch user info: %v", err)
|
||||||
|
username = "unknown"
|
||||||
|
}
|
||||||
|
|
||||||
|
return &CopilotAuthBundle{
|
||||||
|
TokenData: tokenData,
|
||||||
|
Username: username,
|
||||||
|
}, nil
|
||||||
|
}
|
||||||
|
|
||||||
|
// GetCopilotAPIToken exchanges a GitHub access token for a Copilot API token.
|
||||||
|
// This token is used to make authenticated requests to the Copilot API.
|
||||||
|
func (c *CopilotAuth) GetCopilotAPIToken(ctx context.Context, githubAccessToken string) (*CopilotAPIToken, error) {
|
||||||
|
if githubAccessToken == "" {
|
||||||
|
return nil, NewAuthenticationError(ErrTokenExchangeFailed, fmt.Errorf("github access token is empty"))
|
||||||
|
}
|
||||||
|
|
||||||
|
req, err := http.NewRequestWithContext(ctx, http.MethodGet, copilotAPITokenURL, nil)
|
||||||
|
if err != nil {
|
||||||
|
return nil, NewAuthenticationError(ErrTokenExchangeFailed, err)
|
||||||
|
}
|
||||||
|
|
||||||
|
req.Header.Set("Authorization", "token "+githubAccessToken)
|
||||||
|
req.Header.Set("Accept", "application/json")
|
||||||
|
req.Header.Set("User-Agent", copilotUserAgent)
|
||||||
|
req.Header.Set("Editor-Version", copilotEditorVersion)
|
||||||
|
req.Header.Set("Editor-Plugin-Version", copilotPluginVersion)
|
||||||
|
|
||||||
|
resp, err := c.httpClient.Do(req)
|
||||||
|
if err != nil {
|
||||||
|
return nil, NewAuthenticationError(ErrTokenExchangeFailed, err)
|
||||||
|
}
|
||||||
|
defer func() {
|
||||||
|
if errClose := resp.Body.Close(); errClose != nil {
|
||||||
|
log.Errorf("copilot api token: close body error: %v", errClose)
|
||||||
|
}
|
||||||
|
}()
|
||||||
|
|
||||||
|
bodyBytes, err := io.ReadAll(resp.Body)
|
||||||
|
if err != nil {
|
||||||
|
return nil, NewAuthenticationError(ErrTokenExchangeFailed, err)
|
||||||
|
}
|
||||||
|
|
||||||
|
if !isHTTPSuccess(resp.StatusCode) {
|
||||||
|
return nil, NewAuthenticationError(ErrTokenExchangeFailed,
|
||||||
|
fmt.Errorf("status %d: %s", resp.StatusCode, string(bodyBytes)))
|
||||||
|
}
|
||||||
|
|
||||||
|
var apiToken CopilotAPIToken
|
||||||
|
if err = json.Unmarshal(bodyBytes, &apiToken); err != nil {
|
||||||
|
return nil, NewAuthenticationError(ErrTokenExchangeFailed, err)
|
||||||
|
}
|
||||||
|
|
||||||
|
if apiToken.Token == "" {
|
||||||
|
return nil, NewAuthenticationError(ErrTokenExchangeFailed, fmt.Errorf("empty copilot api token"))
|
||||||
|
}
|
||||||
|
|
||||||
|
return &apiToken, nil
|
||||||
|
}
|
||||||
|
|
||||||
|
// ValidateToken checks if a GitHub access token is valid by attempting to fetch user info.
|
||||||
|
func (c *CopilotAuth) ValidateToken(ctx context.Context, accessToken string) (bool, string, error) {
|
||||||
|
if accessToken == "" {
|
||||||
|
return false, "", nil
|
||||||
|
}
|
||||||
|
|
||||||
|
username, err := c.deviceClient.FetchUserInfo(ctx, accessToken)
|
||||||
|
if err != nil {
|
||||||
|
return false, "", err
|
||||||
|
}
|
||||||
|
|
||||||
|
return true, username, nil
|
||||||
|
}
|
||||||
|
|
||||||
|
// CreateTokenStorage creates a new CopilotTokenStorage from auth bundle.
|
||||||
|
func (c *CopilotAuth) CreateTokenStorage(bundle *CopilotAuthBundle) *CopilotTokenStorage {
|
||||||
|
return &CopilotTokenStorage{
|
||||||
|
AccessToken: bundle.TokenData.AccessToken,
|
||||||
|
TokenType: bundle.TokenData.TokenType,
|
||||||
|
Scope: bundle.TokenData.Scope,
|
||||||
|
Username: bundle.Username,
|
||||||
|
Type: "github-copilot",
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// LoadAndValidateToken loads a token from storage and validates it.
|
||||||
|
// Returns the storage if valid, or an error if the token is invalid or expired.
|
||||||
|
func (c *CopilotAuth) LoadAndValidateToken(ctx context.Context, storage *CopilotTokenStorage) (bool, error) {
|
||||||
|
if storage == nil || storage.AccessToken == "" {
|
||||||
|
return false, fmt.Errorf("no token available")
|
||||||
|
}
|
||||||
|
|
||||||
|
// Check if we can still use the GitHub token to get a Copilot API token
|
||||||
|
apiToken, err := c.GetCopilotAPIToken(ctx, storage.AccessToken)
|
||||||
|
if err != nil {
|
||||||
|
return false, err
|
||||||
|
}
|
||||||
|
|
||||||
|
// Check if the API token is expired
|
||||||
|
if apiToken.ExpiresAt > 0 && time.Now().Unix() >= apiToken.ExpiresAt {
|
||||||
|
return false, fmt.Errorf("copilot api token expired")
|
||||||
|
}
|
||||||
|
|
||||||
|
return true, nil
|
||||||
|
}
|
||||||
|
|
||||||
|
// GetAPIEndpoint returns the Copilot API endpoint URL.
|
||||||
|
func (c *CopilotAuth) GetAPIEndpoint() string {
|
||||||
|
return copilotAPIEndpoint
|
||||||
|
}
|
||||||
|
|
||||||
|
// MakeAuthenticatedRequest creates an authenticated HTTP request to the Copilot API.
|
||||||
|
func (c *CopilotAuth) MakeAuthenticatedRequest(ctx context.Context, method, url string, body io.Reader, apiToken *CopilotAPIToken) (*http.Request, error) {
|
||||||
|
req, err := http.NewRequestWithContext(ctx, method, url, body)
|
||||||
|
if err != nil {
|
||||||
|
return nil, fmt.Errorf("failed to create request: %w", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
req.Header.Set("Authorization", "Bearer "+apiToken.Token)
|
||||||
|
req.Header.Set("Content-Type", "application/json")
|
||||||
|
req.Header.Set("Accept", "application/json")
|
||||||
|
req.Header.Set("User-Agent", copilotUserAgent)
|
||||||
|
req.Header.Set("Editor-Version", copilotEditorVersion)
|
||||||
|
req.Header.Set("Editor-Plugin-Version", copilotPluginVersion)
|
||||||
|
req.Header.Set("Openai-Intent", copilotOpenAIIntent)
|
||||||
|
req.Header.Set("Copilot-Integration-Id", copilotIntegrationID)
|
||||||
|
|
||||||
|
return req, nil
|
||||||
|
}
|
||||||
|
|
||||||
|
// buildChatCompletionURL builds the URL for chat completions API.
|
||||||
|
func buildChatCompletionURL() string {
|
||||||
|
return copilotAPIEndpoint + "/chat/completions"
|
||||||
|
}
|
||||||
|
|
||||||
|
// isHTTPSuccess checks if the status code indicates success (2xx).
|
||||||
|
func isHTTPSuccess(statusCode int) bool {
|
||||||
|
return statusCode >= 200 && statusCode < 300
|
||||||
|
}
|
||||||
@@ -0,0 +1,187 @@
|
|||||||
|
package copilot
|
||||||
|
|
||||||
|
import (
|
||||||
|
"errors"
|
||||||
|
"fmt"
|
||||||
|
"net/http"
|
||||||
|
)
|
||||||
|
|
||||||
|
// OAuthError represents an OAuth-specific error.
|
||||||
|
type OAuthError struct {
|
||||||
|
// Code is the OAuth error code.
|
||||||
|
Code string `json:"error"`
|
||||||
|
// Description is a human-readable description of the error.
|
||||||
|
Description string `json:"error_description,omitempty"`
|
||||||
|
// URI is a URI identifying a human-readable web page with information about the error.
|
||||||
|
URI string `json:"error_uri,omitempty"`
|
||||||
|
// StatusCode is the HTTP status code associated with the error.
|
||||||
|
StatusCode int `json:"-"`
|
||||||
|
}
|
||||||
|
|
||||||
|
// Error returns a string representation of the OAuth error.
|
||||||
|
func (e *OAuthError) Error() string {
|
||||||
|
if e.Description != "" {
|
||||||
|
return fmt.Sprintf("OAuth error %s: %s", e.Code, e.Description)
|
||||||
|
}
|
||||||
|
return fmt.Sprintf("OAuth error: %s", e.Code)
|
||||||
|
}
|
||||||
|
|
||||||
|
// NewOAuthError creates a new OAuth error with the specified code, description, and status code.
|
||||||
|
func NewOAuthError(code, description string, statusCode int) *OAuthError {
|
||||||
|
return &OAuthError{
|
||||||
|
Code: code,
|
||||||
|
Description: description,
|
||||||
|
StatusCode: statusCode,
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// AuthenticationError represents authentication-related errors.
|
||||||
|
type AuthenticationError struct {
|
||||||
|
// Type is the type of authentication error.
|
||||||
|
Type string `json:"type"`
|
||||||
|
// Message is a human-readable message describing the error.
|
||||||
|
Message string `json:"message"`
|
||||||
|
// Code is the HTTP status code associated with the error.
|
||||||
|
Code int `json:"code"`
|
||||||
|
// Cause is the underlying error that caused this authentication error.
|
||||||
|
Cause error `json:"-"`
|
||||||
|
}
|
||||||
|
|
||||||
|
// Error returns a string representation of the authentication error.
|
||||||
|
func (e *AuthenticationError) Error() string {
|
||||||
|
if e.Cause != nil {
|
||||||
|
return fmt.Sprintf("%s: %s (caused by: %v)", e.Type, e.Message, e.Cause)
|
||||||
|
}
|
||||||
|
return fmt.Sprintf("%s: %s", e.Type, e.Message)
|
||||||
|
}
|
||||||
|
|
||||||
|
// Unwrap returns the underlying cause of the error.
|
||||||
|
func (e *AuthenticationError) Unwrap() error {
|
||||||
|
return e.Cause
|
||||||
|
}
|
||||||
|
|
||||||
|
// Common authentication error types for GitHub Copilot device flow.
|
||||||
|
var (
|
||||||
|
// ErrDeviceCodeFailed represents an error when requesting the device code fails.
|
||||||
|
ErrDeviceCodeFailed = &AuthenticationError{
|
||||||
|
Type: "device_code_failed",
|
||||||
|
Message: "Failed to request device code from GitHub",
|
||||||
|
Code: http.StatusBadRequest,
|
||||||
|
}
|
||||||
|
|
||||||
|
// ErrDeviceCodeExpired represents an error when the device code has expired.
|
||||||
|
ErrDeviceCodeExpired = &AuthenticationError{
|
||||||
|
Type: "device_code_expired",
|
||||||
|
Message: "Device code has expired. Please try again.",
|
||||||
|
Code: http.StatusGone,
|
||||||
|
}
|
||||||
|
|
||||||
|
// ErrAuthorizationPending represents a pending authorization state (not an error, used for polling).
|
||||||
|
ErrAuthorizationPending = &AuthenticationError{
|
||||||
|
Type: "authorization_pending",
|
||||||
|
Message: "Authorization is pending. Waiting for user to authorize.",
|
||||||
|
Code: http.StatusAccepted,
|
||||||
|
}
|
||||||
|
|
||||||
|
// ErrSlowDown represents a request to slow down polling.
|
||||||
|
ErrSlowDown = &AuthenticationError{
|
||||||
|
Type: "slow_down",
|
||||||
|
Message: "Polling too frequently. Slowing down.",
|
||||||
|
Code: http.StatusTooManyRequests,
|
||||||
|
}
|
||||||
|
|
||||||
|
// ErrAccessDenied represents an error when the user denies authorization.
|
||||||
|
ErrAccessDenied = &AuthenticationError{
|
||||||
|
Type: "access_denied",
|
||||||
|
Message: "User denied authorization",
|
||||||
|
Code: http.StatusForbidden,
|
||||||
|
}
|
||||||
|
|
||||||
|
// ErrTokenExchangeFailed represents an error when token exchange fails.
|
||||||
|
ErrTokenExchangeFailed = &AuthenticationError{
|
||||||
|
Type: "token_exchange_failed",
|
||||||
|
Message: "Failed to exchange device code for access token",
|
||||||
|
Code: http.StatusBadRequest,
|
||||||
|
}
|
||||||
|
|
||||||
|
// ErrPollingTimeout represents an error when polling times out.
|
||||||
|
ErrPollingTimeout = &AuthenticationError{
|
||||||
|
Type: "polling_timeout",
|
||||||
|
Message: "Timeout waiting for user authorization",
|
||||||
|
Code: http.StatusRequestTimeout,
|
||||||
|
}
|
||||||
|
|
||||||
|
// ErrUserInfoFailed represents an error when fetching user info fails.
|
||||||
|
ErrUserInfoFailed = &AuthenticationError{
|
||||||
|
Type: "user_info_failed",
|
||||||
|
Message: "Failed to fetch GitHub user information",
|
||||||
|
Code: http.StatusBadRequest,
|
||||||
|
}
|
||||||
|
)
|
||||||
|
|
||||||
|
// NewAuthenticationError creates a new authentication error with a cause based on a base error.
|
||||||
|
func NewAuthenticationError(baseErr *AuthenticationError, cause error) *AuthenticationError {
|
||||||
|
return &AuthenticationError{
|
||||||
|
Type: baseErr.Type,
|
||||||
|
Message: baseErr.Message,
|
||||||
|
Code: baseErr.Code,
|
||||||
|
Cause: cause,
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// IsAuthenticationError checks if an error is an authentication error.
|
||||||
|
func IsAuthenticationError(err error) bool {
|
||||||
|
var authenticationError *AuthenticationError
|
||||||
|
ok := errors.As(err, &authenticationError)
|
||||||
|
return ok
|
||||||
|
}
|
||||||
|
|
||||||
|
// IsOAuthError checks if an error is an OAuth error.
|
||||||
|
func IsOAuthError(err error) bool {
|
||||||
|
var oAuthError *OAuthError
|
||||||
|
ok := errors.As(err, &oAuthError)
|
||||||
|
return ok
|
||||||
|
}
|
||||||
|
|
||||||
|
// GetUserFriendlyMessage returns a user-friendly error message based on the error type.
|
||||||
|
func GetUserFriendlyMessage(err error) string {
|
||||||
|
var authErr *AuthenticationError
|
||||||
|
if errors.As(err, &authErr) {
|
||||||
|
switch authErr.Type {
|
||||||
|
case "device_code_failed":
|
||||||
|
return "Failed to start GitHub authentication. Please check your network connection and try again."
|
||||||
|
case "device_code_expired":
|
||||||
|
return "The authentication code has expired. Please try again."
|
||||||
|
case "authorization_pending":
|
||||||
|
return "Waiting for you to authorize the application on GitHub."
|
||||||
|
case "slow_down":
|
||||||
|
return "Please wait a moment before trying again."
|
||||||
|
case "access_denied":
|
||||||
|
return "Authentication was cancelled or denied."
|
||||||
|
case "token_exchange_failed":
|
||||||
|
return "Failed to complete authentication. Please try again."
|
||||||
|
case "polling_timeout":
|
||||||
|
return "Authentication timed out. Please try again."
|
||||||
|
case "user_info_failed":
|
||||||
|
return "Failed to get your GitHub account information. Please try again."
|
||||||
|
default:
|
||||||
|
return "Authentication failed. Please try again."
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
var oauthErr *OAuthError
|
||||||
|
if errors.As(err, &oauthErr) {
|
||||||
|
switch oauthErr.Code {
|
||||||
|
case "access_denied":
|
||||||
|
return "Authentication was cancelled or denied."
|
||||||
|
case "invalid_request":
|
||||||
|
return "Invalid authentication request. Please try again."
|
||||||
|
case "server_error":
|
||||||
|
return "GitHub server error. Please try again later."
|
||||||
|
default:
|
||||||
|
return fmt.Sprintf("Authentication failed: %s", oauthErr.Description)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
return "An unexpected error occurred. Please try again."
|
||||||
|
}
|
||||||
@@ -0,0 +1,255 @@
|
|||||||
|
package copilot
|
||||||
|
|
||||||
|
import (
|
||||||
|
"context"
|
||||||
|
"encoding/json"
|
||||||
|
"errors"
|
||||||
|
"fmt"
|
||||||
|
"io"
|
||||||
|
"net/http"
|
||||||
|
"net/url"
|
||||||
|
"strings"
|
||||||
|
"time"
|
||||||
|
|
||||||
|
"github.com/router-for-me/CLIProxyAPI/v6/internal/config"
|
||||||
|
"github.com/router-for-me/CLIProxyAPI/v6/internal/util"
|
||||||
|
log "github.com/sirupsen/logrus"
|
||||||
|
)
|
||||||
|
|
||||||
|
const (
|
||||||
|
// copilotClientID is GitHub's Copilot CLI OAuth client ID.
|
||||||
|
copilotClientID = "Iv1.b507a08c87ecfe98"
|
||||||
|
// copilotDeviceCodeURL is the endpoint for requesting device codes.
|
||||||
|
copilotDeviceCodeURL = "https://github.com/login/device/code"
|
||||||
|
// copilotTokenURL is the endpoint for exchanging device codes for tokens.
|
||||||
|
copilotTokenURL = "https://github.com/login/oauth/access_token"
|
||||||
|
// copilotUserInfoURL is the endpoint for fetching GitHub user information.
|
||||||
|
copilotUserInfoURL = "https://api.github.com/user"
|
||||||
|
// defaultPollInterval is the default interval for polling token endpoint.
|
||||||
|
defaultPollInterval = 5 * time.Second
|
||||||
|
// maxPollDuration is the maximum time to wait for user authorization.
|
||||||
|
maxPollDuration = 15 * time.Minute
|
||||||
|
)
|
||||||
|
|
||||||
|
// DeviceFlowClient handles the OAuth2 device flow for GitHub Copilot.
|
||||||
|
type DeviceFlowClient struct {
|
||||||
|
httpClient *http.Client
|
||||||
|
cfg *config.Config
|
||||||
|
}
|
||||||
|
|
||||||
|
// NewDeviceFlowClient creates a new device flow client.
|
||||||
|
func NewDeviceFlowClient(cfg *config.Config) *DeviceFlowClient {
|
||||||
|
client := &http.Client{Timeout: 30 * time.Second}
|
||||||
|
if cfg != nil {
|
||||||
|
client = util.SetProxy(&cfg.SDKConfig, client)
|
||||||
|
}
|
||||||
|
return &DeviceFlowClient{
|
||||||
|
httpClient: client,
|
||||||
|
cfg: cfg,
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// RequestDeviceCode initiates the device flow by requesting a device code from GitHub.
|
||||||
|
func (c *DeviceFlowClient) RequestDeviceCode(ctx context.Context) (*DeviceCodeResponse, error) {
|
||||||
|
data := url.Values{}
|
||||||
|
data.Set("client_id", copilotClientID)
|
||||||
|
data.Set("scope", "user:email")
|
||||||
|
|
||||||
|
req, err := http.NewRequestWithContext(ctx, http.MethodPost, copilotDeviceCodeURL, strings.NewReader(data.Encode()))
|
||||||
|
if err != nil {
|
||||||
|
return nil, NewAuthenticationError(ErrDeviceCodeFailed, err)
|
||||||
|
}
|
||||||
|
req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
|
||||||
|
req.Header.Set("Accept", "application/json")
|
||||||
|
|
||||||
|
resp, err := c.httpClient.Do(req)
|
||||||
|
if err != nil {
|
||||||
|
return nil, NewAuthenticationError(ErrDeviceCodeFailed, err)
|
||||||
|
}
|
||||||
|
defer func() {
|
||||||
|
if errClose := resp.Body.Close(); errClose != nil {
|
||||||
|
log.Errorf("copilot device code: close body error: %v", errClose)
|
||||||
|
}
|
||||||
|
}()
|
||||||
|
|
||||||
|
if !isHTTPSuccess(resp.StatusCode) {
|
||||||
|
bodyBytes, _ := io.ReadAll(resp.Body)
|
||||||
|
return nil, NewAuthenticationError(ErrDeviceCodeFailed, fmt.Errorf("status %d: %s", resp.StatusCode, string(bodyBytes)))
|
||||||
|
}
|
||||||
|
|
||||||
|
var deviceCode DeviceCodeResponse
|
||||||
|
if err = json.NewDecoder(resp.Body).Decode(&deviceCode); err != nil {
|
||||||
|
return nil, NewAuthenticationError(ErrDeviceCodeFailed, err)
|
||||||
|
}
|
||||||
|
|
||||||
|
return &deviceCode, nil
|
||||||
|
}
|
||||||
|
|
||||||
|
// PollForToken polls the token endpoint until the user authorizes or the device code expires.
|
||||||
|
func (c *DeviceFlowClient) PollForToken(ctx context.Context, deviceCode *DeviceCodeResponse) (*CopilotTokenData, error) {
|
||||||
|
if deviceCode == nil {
|
||||||
|
return nil, NewAuthenticationError(ErrTokenExchangeFailed, fmt.Errorf("device code is nil"))
|
||||||
|
}
|
||||||
|
|
||||||
|
interval := time.Duration(deviceCode.Interval) * time.Second
|
||||||
|
if interval < defaultPollInterval {
|
||||||
|
interval = defaultPollInterval
|
||||||
|
}
|
||||||
|
|
||||||
|
deadline := time.Now().Add(maxPollDuration)
|
||||||
|
if deviceCode.ExpiresIn > 0 {
|
||||||
|
codeDeadline := time.Now().Add(time.Duration(deviceCode.ExpiresIn) * time.Second)
|
||||||
|
if codeDeadline.Before(deadline) {
|
||||||
|
deadline = codeDeadline
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
ticker := time.NewTicker(interval)
|
||||||
|
defer ticker.Stop()
|
||||||
|
|
||||||
|
for {
|
||||||
|
select {
|
||||||
|
case <-ctx.Done():
|
||||||
|
return nil, NewAuthenticationError(ErrPollingTimeout, ctx.Err())
|
||||||
|
case <-ticker.C:
|
||||||
|
if time.Now().After(deadline) {
|
||||||
|
return nil, ErrPollingTimeout
|
||||||
|
}
|
||||||
|
|
||||||
|
token, err := c.exchangeDeviceCode(ctx, deviceCode.DeviceCode)
|
||||||
|
if err != nil {
|
||||||
|
var authErr *AuthenticationError
|
||||||
|
if errors.As(err, &authErr) {
|
||||||
|
switch authErr.Type {
|
||||||
|
case ErrAuthorizationPending.Type:
|
||||||
|
// Continue polling
|
||||||
|
continue
|
||||||
|
case ErrSlowDown.Type:
|
||||||
|
// Increase interval and continue
|
||||||
|
interval += 5 * time.Second
|
||||||
|
ticker.Reset(interval)
|
||||||
|
continue
|
||||||
|
case ErrDeviceCodeExpired.Type:
|
||||||
|
return nil, err
|
||||||
|
case ErrAccessDenied.Type:
|
||||||
|
return nil, err
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return nil, err
|
||||||
|
}
|
||||||
|
return token, nil
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// exchangeDeviceCode attempts to exchange the device code for an access token.
|
||||||
|
func (c *DeviceFlowClient) exchangeDeviceCode(ctx context.Context, deviceCode string) (*CopilotTokenData, error) {
|
||||||
|
data := url.Values{}
|
||||||
|
data.Set("client_id", copilotClientID)
|
||||||
|
data.Set("device_code", deviceCode)
|
||||||
|
data.Set("grant_type", "urn:ietf:params:oauth:grant-type:device_code")
|
||||||
|
|
||||||
|
req, err := http.NewRequestWithContext(ctx, http.MethodPost, copilotTokenURL, strings.NewReader(data.Encode()))
|
||||||
|
if err != nil {
|
||||||
|
return nil, NewAuthenticationError(ErrTokenExchangeFailed, err)
|
||||||
|
}
|
||||||
|
req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
|
||||||
|
req.Header.Set("Accept", "application/json")
|
||||||
|
|
||||||
|
resp, err := c.httpClient.Do(req)
|
||||||
|
if err != nil {
|
||||||
|
return nil, NewAuthenticationError(ErrTokenExchangeFailed, err)
|
||||||
|
}
|
||||||
|
defer func() {
|
||||||
|
if errClose := resp.Body.Close(); errClose != nil {
|
||||||
|
log.Errorf("copilot token exchange: close body error: %v", errClose)
|
||||||
|
}
|
||||||
|
}()
|
||||||
|
|
||||||
|
bodyBytes, err := io.ReadAll(resp.Body)
|
||||||
|
if err != nil {
|
||||||
|
return nil, NewAuthenticationError(ErrTokenExchangeFailed, err)
|
||||||
|
}
|
||||||
|
|
||||||
|
// GitHub returns 200 for both success and error cases in device flow
|
||||||
|
// Check for OAuth error response first
|
||||||
|
var oauthResp struct {
|
||||||
|
Error string `json:"error"`
|
||||||
|
ErrorDescription string `json:"error_description"`
|
||||||
|
AccessToken string `json:"access_token"`
|
||||||
|
TokenType string `json:"token_type"`
|
||||||
|
Scope string `json:"scope"`
|
||||||
|
}
|
||||||
|
|
||||||
|
if err = json.Unmarshal(bodyBytes, &oauthResp); err != nil {
|
||||||
|
return nil, NewAuthenticationError(ErrTokenExchangeFailed, err)
|
||||||
|
}
|
||||||
|
|
||||||
|
if oauthResp.Error != "" {
|
||||||
|
switch oauthResp.Error {
|
||||||
|
case "authorization_pending":
|
||||||
|
return nil, ErrAuthorizationPending
|
||||||
|
case "slow_down":
|
||||||
|
return nil, ErrSlowDown
|
||||||
|
case "expired_token":
|
||||||
|
return nil, ErrDeviceCodeExpired
|
||||||
|
case "access_denied":
|
||||||
|
return nil, ErrAccessDenied
|
||||||
|
default:
|
||||||
|
return nil, NewOAuthError(oauthResp.Error, oauthResp.ErrorDescription, resp.StatusCode)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
if oauthResp.AccessToken == "" {
|
||||||
|
return nil, NewAuthenticationError(ErrTokenExchangeFailed, fmt.Errorf("empty access token"))
|
||||||
|
}
|
||||||
|
|
||||||
|
return &CopilotTokenData{
|
||||||
|
AccessToken: oauthResp.AccessToken,
|
||||||
|
TokenType: oauthResp.TokenType,
|
||||||
|
Scope: oauthResp.Scope,
|
||||||
|
}, nil
|
||||||
|
}
|
||||||
|
|
||||||
|
// FetchUserInfo retrieves the GitHub username for the authenticated user.
|
||||||
|
func (c *DeviceFlowClient) FetchUserInfo(ctx context.Context, accessToken string) (string, error) {
|
||||||
|
if accessToken == "" {
|
||||||
|
return "", NewAuthenticationError(ErrUserInfoFailed, fmt.Errorf("access token is empty"))
|
||||||
|
}
|
||||||
|
|
||||||
|
req, err := http.NewRequestWithContext(ctx, http.MethodGet, copilotUserInfoURL, nil)
|
||||||
|
if err != nil {
|
||||||
|
return "", NewAuthenticationError(ErrUserInfoFailed, err)
|
||||||
|
}
|
||||||
|
req.Header.Set("Authorization", "Bearer "+accessToken)
|
||||||
|
req.Header.Set("Accept", "application/json")
|
||||||
|
req.Header.Set("User-Agent", "CLIProxyAPI")
|
||||||
|
|
||||||
|
resp, err := c.httpClient.Do(req)
|
||||||
|
if err != nil {
|
||||||
|
return "", NewAuthenticationError(ErrUserInfoFailed, err)
|
||||||
|
}
|
||||||
|
defer func() {
|
||||||
|
if errClose := resp.Body.Close(); errClose != nil {
|
||||||
|
log.Errorf("copilot user info: close body error: %v", errClose)
|
||||||
|
}
|
||||||
|
}()
|
||||||
|
|
||||||
|
if !isHTTPSuccess(resp.StatusCode) {
|
||||||
|
bodyBytes, _ := io.ReadAll(resp.Body)
|
||||||
|
return "", NewAuthenticationError(ErrUserInfoFailed, fmt.Errorf("status %d: %s", resp.StatusCode, string(bodyBytes)))
|
||||||
|
}
|
||||||
|
|
||||||
|
var userInfo struct {
|
||||||
|
Login string `json:"login"`
|
||||||
|
}
|
||||||
|
if err = json.NewDecoder(resp.Body).Decode(&userInfo); err != nil {
|
||||||
|
return "", NewAuthenticationError(ErrUserInfoFailed, err)
|
||||||
|
}
|
||||||
|
|
||||||
|
if userInfo.Login == "" {
|
||||||
|
return "", NewAuthenticationError(ErrUserInfoFailed, fmt.Errorf("empty username"))
|
||||||
|
}
|
||||||
|
|
||||||
|
return userInfo.Login, nil
|
||||||
|
}
|
||||||
@@ -0,0 +1,93 @@
|
|||||||
|
// Package copilot provides authentication and token management functionality
|
||||||
|
// for GitHub Copilot AI services. It handles OAuth2 device flow token storage,
|
||||||
|
// serialization, and retrieval for maintaining authenticated sessions with the Copilot API.
|
||||||
|
package copilot
|
||||||
|
|
||||||
|
import (
|
||||||
|
"encoding/json"
|
||||||
|
"fmt"
|
||||||
|
"os"
|
||||||
|
"path/filepath"
|
||||||
|
|
||||||
|
"github.com/router-for-me/CLIProxyAPI/v6/internal/misc"
|
||||||
|
)
|
||||||
|
|
||||||
|
// CopilotTokenStorage stores OAuth2 token information for GitHub Copilot API authentication.
|
||||||
|
// It maintains compatibility with the existing auth system while adding Copilot-specific fields
|
||||||
|
// for managing access tokens and user account information.
|
||||||
|
type CopilotTokenStorage struct {
|
||||||
|
// AccessToken is the OAuth2 access token used for authenticating API requests.
|
||||||
|
AccessToken string `json:"access_token"`
|
||||||
|
// TokenType is the type of token, typically "bearer".
|
||||||
|
TokenType string `json:"token_type"`
|
||||||
|
// Scope is the OAuth2 scope granted to the token.
|
||||||
|
Scope string `json:"scope"`
|
||||||
|
// ExpiresAt is the timestamp when the access token expires (if provided).
|
||||||
|
ExpiresAt string `json:"expires_at,omitempty"`
|
||||||
|
// Username is the GitHub username associated with this token.
|
||||||
|
Username string `json:"username"`
|
||||||
|
// Type indicates the authentication provider type, always "github-copilot" for this storage.
|
||||||
|
Type string `json:"type"`
|
||||||
|
}
|
||||||
|
|
||||||
|
// CopilotTokenData holds the raw OAuth token response from GitHub.
|
||||||
|
type CopilotTokenData struct {
|
||||||
|
// AccessToken is the OAuth2 access token.
|
||||||
|
AccessToken string `json:"access_token"`
|
||||||
|
// TokenType is the type of token, typically "bearer".
|
||||||
|
TokenType string `json:"token_type"`
|
||||||
|
// Scope is the OAuth2 scope granted to the token.
|
||||||
|
Scope string `json:"scope"`
|
||||||
|
}
|
||||||
|
|
||||||
|
// CopilotAuthBundle bundles authentication data for storage.
|
||||||
|
type CopilotAuthBundle struct {
|
||||||
|
// TokenData contains the OAuth token information.
|
||||||
|
TokenData *CopilotTokenData
|
||||||
|
// Username is the GitHub username.
|
||||||
|
Username string
|
||||||
|
}
|
||||||
|
|
||||||
|
// DeviceCodeResponse represents GitHub's device code response.
|
||||||
|
type DeviceCodeResponse struct {
|
||||||
|
// DeviceCode is the device verification code.
|
||||||
|
DeviceCode string `json:"device_code"`
|
||||||
|
// UserCode is the code the user must enter at the verification URI.
|
||||||
|
UserCode string `json:"user_code"`
|
||||||
|
// VerificationURI is the URL where the user should enter the code.
|
||||||
|
VerificationURI string `json:"verification_uri"`
|
||||||
|
// ExpiresIn is the number of seconds until the device code expires.
|
||||||
|
ExpiresIn int `json:"expires_in"`
|
||||||
|
// Interval is the minimum number of seconds to wait between polling requests.
|
||||||
|
Interval int `json:"interval"`
|
||||||
|
}
|
||||||
|
|
||||||
|
// SaveTokenToFile serializes the Copilot token storage to a JSON file.
|
||||||
|
// This method creates the necessary directory structure and writes the token
|
||||||
|
// data in JSON format to the specified file path for persistent storage.
|
||||||
|
//
|
||||||
|
// Parameters:
|
||||||
|
// - authFilePath: The full path where the token file should be saved
|
||||||
|
//
|
||||||
|
// Returns:
|
||||||
|
// - error: An error if the operation fails, nil otherwise
|
||||||
|
func (ts *CopilotTokenStorage) SaveTokenToFile(authFilePath string) error {
|
||||||
|
misc.LogSavingCredentials(authFilePath)
|
||||||
|
ts.Type = "github-copilot"
|
||||||
|
if err := os.MkdirAll(filepath.Dir(authFilePath), 0700); err != nil {
|
||||||
|
return fmt.Errorf("failed to create directory: %v", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
f, err := os.Create(authFilePath)
|
||||||
|
if err != nil {
|
||||||
|
return fmt.Errorf("failed to create token file: %w", err)
|
||||||
|
}
|
||||||
|
defer func() {
|
||||||
|
_ = f.Close()
|
||||||
|
}()
|
||||||
|
|
||||||
|
if err = json.NewEncoder(f).Encode(ts); err != nil {
|
||||||
|
return fmt.Errorf("failed to write token to file: %w", err)
|
||||||
|
}
|
||||||
|
return nil
|
||||||
|
}
|
||||||
@@ -6,7 +6,7 @@ import (
|
|||||||
|
|
||||||
// newAuthManager creates a new authentication manager instance with all supported
|
// newAuthManager creates a new authentication manager instance with all supported
|
||||||
// authenticators and a file-based token store. It initializes authenticators for
|
// authenticators and a file-based token store. It initializes authenticators for
|
||||||
// Gemini, Codex, Claude, and Qwen providers.
|
// Gemini, Codex, Claude, Qwen, IFlow, Antigravity, and GitHub Copilot providers.
|
||||||
//
|
//
|
||||||
// Returns:
|
// Returns:
|
||||||
// - *sdkAuth.Manager: A configured authentication manager instance
|
// - *sdkAuth.Manager: A configured authentication manager instance
|
||||||
@@ -19,6 +19,7 @@ func newAuthManager() *sdkAuth.Manager {
|
|||||||
sdkAuth.NewQwenAuthenticator(),
|
sdkAuth.NewQwenAuthenticator(),
|
||||||
sdkAuth.NewIFlowAuthenticator(),
|
sdkAuth.NewIFlowAuthenticator(),
|
||||||
sdkAuth.NewAntigravityAuthenticator(),
|
sdkAuth.NewAntigravityAuthenticator(),
|
||||||
|
sdkAuth.NewGitHubCopilotAuthenticator(),
|
||||||
)
|
)
|
||||||
return manager
|
return manager
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -0,0 +1,44 @@
|
|||||||
|
package cmd
|
||||||
|
|
||||||
|
import (
|
||||||
|
"context"
|
||||||
|
"fmt"
|
||||||
|
|
||||||
|
"github.com/router-for-me/CLIProxyAPI/v6/internal/config"
|
||||||
|
sdkAuth "github.com/router-for-me/CLIProxyAPI/v6/sdk/auth"
|
||||||
|
log "github.com/sirupsen/logrus"
|
||||||
|
)
|
||||||
|
|
||||||
|
// DoGitHubCopilotLogin triggers the OAuth device flow for GitHub Copilot and saves tokens.
|
||||||
|
// It initiates the device flow authentication, displays the user code for the user to enter
|
||||||
|
// at GitHub's verification URL, and waits for authorization before saving the tokens.
|
||||||
|
//
|
||||||
|
// Parameters:
|
||||||
|
// - cfg: The application configuration containing proxy and auth directory settings
|
||||||
|
// - options: Login options including browser behavior settings
|
||||||
|
func DoGitHubCopilotLogin(cfg *config.Config, options *LoginOptions) {
|
||||||
|
if options == nil {
|
||||||
|
options = &LoginOptions{}
|
||||||
|
}
|
||||||
|
|
||||||
|
manager := newAuthManager()
|
||||||
|
authOpts := &sdkAuth.LoginOptions{
|
||||||
|
NoBrowser: options.NoBrowser,
|
||||||
|
Metadata: map[string]string{},
|
||||||
|
Prompt: options.Prompt,
|
||||||
|
}
|
||||||
|
|
||||||
|
record, savedPath, err := manager.Login(context.Background(), "github-copilot", cfg, authOpts)
|
||||||
|
if err != nil {
|
||||||
|
log.Errorf("GitHub Copilot authentication failed: %v", err)
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
if savedPath != "" {
|
||||||
|
fmt.Printf("Authentication saved to %s\n", savedPath)
|
||||||
|
}
|
||||||
|
if record != nil && record.Label != "" {
|
||||||
|
fmt.Printf("Authenticated as %s\n", record.Label)
|
||||||
|
}
|
||||||
|
fmt.Println("GitHub Copilot authentication successful!")
|
||||||
|
}
|
||||||
@@ -985,3 +985,187 @@ func GetIFlowModels() []*ModelInfo {
|
|||||||
}
|
}
|
||||||
return models
|
return models
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// GetGitHubCopilotModels returns the available models for GitHub Copilot.
|
||||||
|
// These models are available through the GitHub Copilot API at api.githubcopilot.com.
|
||||||
|
func GetGitHubCopilotModels() []*ModelInfo {
|
||||||
|
now := int64(1732752000) // 2024-11-27
|
||||||
|
return []*ModelInfo{
|
||||||
|
{
|
||||||
|
ID: "gpt-4.1",
|
||||||
|
Object: "model",
|
||||||
|
Created: now,
|
||||||
|
OwnedBy: "github-copilot",
|
||||||
|
Type: "github-copilot",
|
||||||
|
DisplayName: "GPT-4.1",
|
||||||
|
Description: "OpenAI GPT-4.1 via GitHub Copilot",
|
||||||
|
ContextLength: 128000,
|
||||||
|
MaxCompletionTokens: 16384,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
ID: "gpt-5",
|
||||||
|
Object: "model",
|
||||||
|
Created: now,
|
||||||
|
OwnedBy: "github-copilot",
|
||||||
|
Type: "github-copilot",
|
||||||
|
DisplayName: "GPT-5",
|
||||||
|
Description: "OpenAI GPT-5 via GitHub Copilot",
|
||||||
|
ContextLength: 200000,
|
||||||
|
MaxCompletionTokens: 32768,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
ID: "gpt-5-mini",
|
||||||
|
Object: "model",
|
||||||
|
Created: now,
|
||||||
|
OwnedBy: "github-copilot",
|
||||||
|
Type: "github-copilot",
|
||||||
|
DisplayName: "GPT-5 Mini",
|
||||||
|
Description: "OpenAI GPT-5 Mini via GitHub Copilot",
|
||||||
|
ContextLength: 128000,
|
||||||
|
MaxCompletionTokens: 16384,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
ID: "gpt-5-codex",
|
||||||
|
Object: "model",
|
||||||
|
Created: now,
|
||||||
|
OwnedBy: "github-copilot",
|
||||||
|
Type: "github-copilot",
|
||||||
|
DisplayName: "GPT-5 Codex",
|
||||||
|
Description: "OpenAI GPT-5 Codex via GitHub Copilot",
|
||||||
|
ContextLength: 200000,
|
||||||
|
MaxCompletionTokens: 32768,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
ID: "gpt-5.1",
|
||||||
|
Object: "model",
|
||||||
|
Created: now,
|
||||||
|
OwnedBy: "github-copilot",
|
||||||
|
Type: "github-copilot",
|
||||||
|
DisplayName: "GPT-5.1",
|
||||||
|
Description: "OpenAI GPT-5.1 via GitHub Copilot",
|
||||||
|
ContextLength: 200000,
|
||||||
|
MaxCompletionTokens: 32768,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
ID: "gpt-5.1-codex",
|
||||||
|
Object: "model",
|
||||||
|
Created: now,
|
||||||
|
OwnedBy: "github-copilot",
|
||||||
|
Type: "github-copilot",
|
||||||
|
DisplayName: "GPT-5.1 Codex",
|
||||||
|
Description: "OpenAI GPT-5.1 Codex via GitHub Copilot",
|
||||||
|
ContextLength: 200000,
|
||||||
|
MaxCompletionTokens: 32768,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
ID: "gpt-5.1-codex-mini",
|
||||||
|
Object: "model",
|
||||||
|
Created: now,
|
||||||
|
OwnedBy: "github-copilot",
|
||||||
|
Type: "github-copilot",
|
||||||
|
DisplayName: "GPT-5.1 Codex Mini",
|
||||||
|
Description: "OpenAI GPT-5.1 Codex Mini via GitHub Copilot",
|
||||||
|
ContextLength: 128000,
|
||||||
|
MaxCompletionTokens: 16384,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
ID: "claude-haiku-4.5",
|
||||||
|
Object: "model",
|
||||||
|
Created: now,
|
||||||
|
OwnedBy: "github-copilot",
|
||||||
|
Type: "github-copilot",
|
||||||
|
DisplayName: "Claude Haiku 4.5",
|
||||||
|
Description: "Anthropic Claude Haiku 4.5 via GitHub Copilot",
|
||||||
|
ContextLength: 200000,
|
||||||
|
MaxCompletionTokens: 64000,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
ID: "claude-opus-4.1",
|
||||||
|
Object: "model",
|
||||||
|
Created: now,
|
||||||
|
OwnedBy: "github-copilot",
|
||||||
|
Type: "github-copilot",
|
||||||
|
DisplayName: "Claude Opus 4.1",
|
||||||
|
Description: "Anthropic Claude Opus 4.1 via GitHub Copilot",
|
||||||
|
ContextLength: 200000,
|
||||||
|
MaxCompletionTokens: 32000,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
ID: "claude-opus-4.5",
|
||||||
|
Object: "model",
|
||||||
|
Created: now,
|
||||||
|
OwnedBy: "github-copilot",
|
||||||
|
Type: "github-copilot",
|
||||||
|
DisplayName: "Claude Opus 4.5",
|
||||||
|
Description: "Anthropic Claude Opus 4.5 via GitHub Copilot",
|
||||||
|
ContextLength: 200000,
|
||||||
|
MaxCompletionTokens: 64000,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
ID: "claude-sonnet-4",
|
||||||
|
Object: "model",
|
||||||
|
Created: now,
|
||||||
|
OwnedBy: "github-copilot",
|
||||||
|
Type: "github-copilot",
|
||||||
|
DisplayName: "Claude Sonnet 4",
|
||||||
|
Description: "Anthropic Claude Sonnet 4 via GitHub Copilot",
|
||||||
|
ContextLength: 200000,
|
||||||
|
MaxCompletionTokens: 64000,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
ID: "claude-sonnet-4.5",
|
||||||
|
Object: "model",
|
||||||
|
Created: now,
|
||||||
|
OwnedBy: "github-copilot",
|
||||||
|
Type: "github-copilot",
|
||||||
|
DisplayName: "Claude Sonnet 4.5",
|
||||||
|
Description: "Anthropic Claude Sonnet 4.5 via GitHub Copilot",
|
||||||
|
ContextLength: 200000,
|
||||||
|
MaxCompletionTokens: 64000,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
ID: "gemini-2.5-pro",
|
||||||
|
Object: "model",
|
||||||
|
Created: now,
|
||||||
|
OwnedBy: "github-copilot",
|
||||||
|
Type: "github-copilot",
|
||||||
|
DisplayName: "Gemini 2.5 Pro",
|
||||||
|
Description: "Google Gemini 2.5 Pro via GitHub Copilot",
|
||||||
|
ContextLength: 1048576,
|
||||||
|
MaxCompletionTokens: 65536,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
ID: "gemini-3-pro",
|
||||||
|
Object: "model",
|
||||||
|
Created: now,
|
||||||
|
OwnedBy: "github-copilot",
|
||||||
|
Type: "github-copilot",
|
||||||
|
DisplayName: "Gemini 3 Pro",
|
||||||
|
Description: "Google Gemini 3 Pro via GitHub Copilot",
|
||||||
|
ContextLength: 1048576,
|
||||||
|
MaxCompletionTokens: 65536,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
ID: "grok-code-fast-1",
|
||||||
|
Object: "model",
|
||||||
|
Created: now,
|
||||||
|
OwnedBy: "github-copilot",
|
||||||
|
Type: "github-copilot",
|
||||||
|
DisplayName: "Grok Code Fast 1",
|
||||||
|
Description: "xAI Grok Code Fast 1 via GitHub Copilot",
|
||||||
|
ContextLength: 128000,
|
||||||
|
MaxCompletionTokens: 16384,
|
||||||
|
},
|
||||||
|
{
|
||||||
|
ID: "raptor-mini",
|
||||||
|
Object: "model",
|
||||||
|
Created: now,
|
||||||
|
OwnedBy: "github-copilot",
|
||||||
|
Type: "github-copilot",
|
||||||
|
DisplayName: "Raptor Mini",
|
||||||
|
Description: "Raptor Mini via GitHub Copilot",
|
||||||
|
ContextLength: 128000,
|
||||||
|
MaxCompletionTokens: 16384,
|
||||||
|
},
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|||||||
@@ -0,0 +1,361 @@
|
|||||||
|
package executor
|
||||||
|
|
||||||
|
import (
|
||||||
|
"bufio"
|
||||||
|
"bytes"
|
||||||
|
"context"
|
||||||
|
"fmt"
|
||||||
|
"io"
|
||||||
|
"net/http"
|
||||||
|
"sync"
|
||||||
|
"time"
|
||||||
|
|
||||||
|
"github.com/google/uuid"
|
||||||
|
copilotauth "github.com/router-for-me/CLIProxyAPI/v6/internal/auth/copilot"
|
||||||
|
"github.com/router-for-me/CLIProxyAPI/v6/internal/config"
|
||||||
|
cliproxyauth "github.com/router-for-me/CLIProxyAPI/v6/sdk/cliproxy/auth"
|
||||||
|
cliproxyexecutor "github.com/router-for-me/CLIProxyAPI/v6/sdk/cliproxy/executor"
|
||||||
|
sdktranslator "github.com/router-for-me/CLIProxyAPI/v6/sdk/translator"
|
||||||
|
log "github.com/sirupsen/logrus"
|
||||||
|
"github.com/tidwall/sjson"
|
||||||
|
)
|
||||||
|
|
||||||
|
const (
|
||||||
|
githubCopilotBaseURL = "https://api.githubcopilot.com"
|
||||||
|
githubCopilotChatPath = "/chat/completions"
|
||||||
|
githubCopilotAuthType = "github-copilot"
|
||||||
|
githubCopilotTokenCacheTTL = 25 * time.Minute
|
||||||
|
// tokenExpiryBuffer is the time before expiry when we should refresh the token.
|
||||||
|
tokenExpiryBuffer = 5 * time.Minute
|
||||||
|
// maxScannerBufferSize is the maximum buffer size for SSE scanning (20MB).
|
||||||
|
maxScannerBufferSize = 20_971_520
|
||||||
|
|
||||||
|
// Copilot API header values.
|
||||||
|
copilotUserAgent = "GithubCopilot/1.0"
|
||||||
|
copilotEditorVersion = "vscode/1.100.0"
|
||||||
|
copilotPluginVersion = "copilot/1.300.0"
|
||||||
|
copilotIntegrationID = "vscode-chat"
|
||||||
|
copilotOpenAIIntent = "conversation-panel"
|
||||||
|
)
|
||||||
|
|
||||||
|
// GitHubCopilotExecutor handles requests to the GitHub Copilot API.
|
||||||
|
type GitHubCopilotExecutor struct {
|
||||||
|
cfg *config.Config
|
||||||
|
mu sync.RWMutex
|
||||||
|
cache map[string]*cachedAPIToken
|
||||||
|
}
|
||||||
|
|
||||||
|
// cachedAPIToken stores a cached Copilot API token with its expiry.
|
||||||
|
type cachedAPIToken struct {
|
||||||
|
token string
|
||||||
|
expiresAt time.Time
|
||||||
|
}
|
||||||
|
|
||||||
|
// NewGitHubCopilotExecutor constructs a new executor instance.
|
||||||
|
func NewGitHubCopilotExecutor(cfg *config.Config) *GitHubCopilotExecutor {
|
||||||
|
return &GitHubCopilotExecutor{
|
||||||
|
cfg: cfg,
|
||||||
|
cache: make(map[string]*cachedAPIToken),
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Identifier implements ProviderExecutor.
|
||||||
|
func (e *GitHubCopilotExecutor) Identifier() string { return githubCopilotAuthType }
|
||||||
|
|
||||||
|
// PrepareRequest implements ProviderExecutor.
|
||||||
|
func (e *GitHubCopilotExecutor) PrepareRequest(_ *http.Request, _ *cliproxyauth.Auth) error {
|
||||||
|
return nil
|
||||||
|
}
|
||||||
|
|
||||||
|
// Execute handles non-streaming requests to GitHub Copilot.
|
||||||
|
func (e *GitHubCopilotExecutor) Execute(ctx context.Context, auth *cliproxyauth.Auth, req cliproxyexecutor.Request, opts cliproxyexecutor.Options) (resp cliproxyexecutor.Response, err error) {
|
||||||
|
apiToken, errToken := e.ensureAPIToken(ctx, auth)
|
||||||
|
if errToken != nil {
|
||||||
|
return resp, errToken
|
||||||
|
}
|
||||||
|
|
||||||
|
reporter := newUsageReporter(ctx, e.Identifier(), req.Model, auth)
|
||||||
|
defer reporter.trackFailure(ctx, &err)
|
||||||
|
|
||||||
|
from := opts.SourceFormat
|
||||||
|
to := sdktranslator.FromString("openai")
|
||||||
|
body := sdktranslator.TranslateRequest(from, to, req.Model, bytes.Clone(req.Payload), false)
|
||||||
|
body = e.normalizeModel(req.Model, body)
|
||||||
|
body = applyPayloadConfig(e.cfg, req.Model, body)
|
||||||
|
body, _ = sjson.SetBytes(body, "stream", false)
|
||||||
|
|
||||||
|
url := githubCopilotBaseURL + githubCopilotChatPath
|
||||||
|
httpReq, err := http.NewRequestWithContext(ctx, http.MethodPost, url, bytes.NewReader(body))
|
||||||
|
if err != nil {
|
||||||
|
return resp, err
|
||||||
|
}
|
||||||
|
e.applyHeaders(httpReq, apiToken)
|
||||||
|
|
||||||
|
var authID, authLabel, authType, authValue string
|
||||||
|
if auth != nil {
|
||||||
|
authID = auth.ID
|
||||||
|
authLabel = auth.Label
|
||||||
|
authType, authValue = auth.AccountInfo()
|
||||||
|
}
|
||||||
|
recordAPIRequest(ctx, e.cfg, upstreamRequestLog{
|
||||||
|
URL: url,
|
||||||
|
Method: http.MethodPost,
|
||||||
|
Headers: httpReq.Header.Clone(),
|
||||||
|
Body: body,
|
||||||
|
Provider: e.Identifier(),
|
||||||
|
AuthID: authID,
|
||||||
|
AuthLabel: authLabel,
|
||||||
|
AuthType: authType,
|
||||||
|
AuthValue: authValue,
|
||||||
|
})
|
||||||
|
|
||||||
|
httpClient := newProxyAwareHTTPClient(ctx, e.cfg, auth, 0)
|
||||||
|
httpResp, err := httpClient.Do(httpReq)
|
||||||
|
if err != nil {
|
||||||
|
recordAPIResponseError(ctx, e.cfg, err)
|
||||||
|
return resp, err
|
||||||
|
}
|
||||||
|
defer func() {
|
||||||
|
if errClose := httpResp.Body.Close(); errClose != nil {
|
||||||
|
log.Errorf("github-copilot executor: close response body error: %v", errClose)
|
||||||
|
}
|
||||||
|
}()
|
||||||
|
|
||||||
|
recordAPIResponseMetadata(ctx, e.cfg, httpResp.StatusCode, httpResp.Header.Clone())
|
||||||
|
|
||||||
|
if !isHTTPSuccess(httpResp.StatusCode) {
|
||||||
|
data, _ := io.ReadAll(httpResp.Body)
|
||||||
|
appendAPIResponseChunk(ctx, e.cfg, data)
|
||||||
|
log.Debugf("github-copilot executor: upstream error status: %d, body: %s", httpResp.StatusCode, summarizeErrorBody(httpResp.Header.Get("Content-Type"), data))
|
||||||
|
err = statusErr{code: httpResp.StatusCode, msg: string(data)}
|
||||||
|
return resp, err
|
||||||
|
}
|
||||||
|
|
||||||
|
data, err := io.ReadAll(httpResp.Body)
|
||||||
|
if err != nil {
|
||||||
|
recordAPIResponseError(ctx, e.cfg, err)
|
||||||
|
return resp, err
|
||||||
|
}
|
||||||
|
appendAPIResponseChunk(ctx, e.cfg, data)
|
||||||
|
|
||||||
|
detail := parseOpenAIUsage(data)
|
||||||
|
if detail.TotalTokens > 0 {
|
||||||
|
reporter.publish(ctx, detail)
|
||||||
|
}
|
||||||
|
|
||||||
|
var param any
|
||||||
|
converted := sdktranslator.TranslateNonStream(ctx, to, from, req.Model, bytes.Clone(opts.OriginalRequest), body, data, ¶m)
|
||||||
|
resp = cliproxyexecutor.Response{Payload: []byte(converted)}
|
||||||
|
reporter.ensurePublished(ctx)
|
||||||
|
return resp, nil
|
||||||
|
}
|
||||||
|
|
||||||
|
// ExecuteStream handles streaming requests to GitHub Copilot.
|
||||||
|
func (e *GitHubCopilotExecutor) ExecuteStream(ctx context.Context, auth *cliproxyauth.Auth, req cliproxyexecutor.Request, opts cliproxyexecutor.Options) (stream <-chan cliproxyexecutor.StreamChunk, err error) {
|
||||||
|
apiToken, errToken := e.ensureAPIToken(ctx, auth)
|
||||||
|
if errToken != nil {
|
||||||
|
return nil, errToken
|
||||||
|
}
|
||||||
|
|
||||||
|
reporter := newUsageReporter(ctx, e.Identifier(), req.Model, auth)
|
||||||
|
defer reporter.trackFailure(ctx, &err)
|
||||||
|
|
||||||
|
from := opts.SourceFormat
|
||||||
|
to := sdktranslator.FromString("openai")
|
||||||
|
body := sdktranslator.TranslateRequest(from, to, req.Model, bytes.Clone(req.Payload), true)
|
||||||
|
body = e.normalizeModel(req.Model, body)
|
||||||
|
body = applyPayloadConfig(e.cfg, req.Model, body)
|
||||||
|
body, _ = sjson.SetBytes(body, "stream", true)
|
||||||
|
// Enable stream options for usage stats in stream
|
||||||
|
body, _ = sjson.SetBytes(body, "stream_options.include_usage", true)
|
||||||
|
|
||||||
|
url := githubCopilotBaseURL + githubCopilotChatPath
|
||||||
|
httpReq, err := http.NewRequestWithContext(ctx, http.MethodPost, url, bytes.NewReader(body))
|
||||||
|
if err != nil {
|
||||||
|
return nil, err
|
||||||
|
}
|
||||||
|
e.applyHeaders(httpReq, apiToken)
|
||||||
|
|
||||||
|
var authID, authLabel, authType, authValue string
|
||||||
|
if auth != nil {
|
||||||
|
authID = auth.ID
|
||||||
|
authLabel = auth.Label
|
||||||
|
authType, authValue = auth.AccountInfo()
|
||||||
|
}
|
||||||
|
recordAPIRequest(ctx, e.cfg, upstreamRequestLog{
|
||||||
|
URL: url,
|
||||||
|
Method: http.MethodPost,
|
||||||
|
Headers: httpReq.Header.Clone(),
|
||||||
|
Body: body,
|
||||||
|
Provider: e.Identifier(),
|
||||||
|
AuthID: authID,
|
||||||
|
AuthLabel: authLabel,
|
||||||
|
AuthType: authType,
|
||||||
|
AuthValue: authValue,
|
||||||
|
})
|
||||||
|
|
||||||
|
httpClient := newProxyAwareHTTPClient(ctx, e.cfg, auth, 0)
|
||||||
|
httpResp, err := httpClient.Do(httpReq)
|
||||||
|
if err != nil {
|
||||||
|
recordAPIResponseError(ctx, e.cfg, err)
|
||||||
|
return nil, err
|
||||||
|
}
|
||||||
|
|
||||||
|
recordAPIResponseMetadata(ctx, e.cfg, httpResp.StatusCode, httpResp.Header.Clone())
|
||||||
|
|
||||||
|
if !isHTTPSuccess(httpResp.StatusCode) {
|
||||||
|
data, readErr := io.ReadAll(httpResp.Body)
|
||||||
|
if errClose := httpResp.Body.Close(); errClose != nil {
|
||||||
|
log.Errorf("github-copilot executor: close response body error: %v", errClose)
|
||||||
|
}
|
||||||
|
if readErr != nil {
|
||||||
|
recordAPIResponseError(ctx, e.cfg, readErr)
|
||||||
|
return nil, readErr
|
||||||
|
}
|
||||||
|
appendAPIResponseChunk(ctx, e.cfg, data)
|
||||||
|
log.Debugf("github-copilot executor: upstream error status: %d, body: %s", httpResp.StatusCode, summarizeErrorBody(httpResp.Header.Get("Content-Type"), data))
|
||||||
|
err = statusErr{code: httpResp.StatusCode, msg: string(data)}
|
||||||
|
return nil, err
|
||||||
|
}
|
||||||
|
|
||||||
|
out := make(chan cliproxyexecutor.StreamChunk)
|
||||||
|
stream = out
|
||||||
|
|
||||||
|
go func() {
|
||||||
|
defer close(out)
|
||||||
|
defer func() {
|
||||||
|
if errClose := httpResp.Body.Close(); errClose != nil {
|
||||||
|
log.Errorf("github-copilot executor: close response body error: %v", errClose)
|
||||||
|
}
|
||||||
|
}()
|
||||||
|
|
||||||
|
scanner := bufio.NewScanner(httpResp.Body)
|
||||||
|
scanner.Buffer(nil, maxScannerBufferSize)
|
||||||
|
var param any
|
||||||
|
|
||||||
|
for scanner.Scan() {
|
||||||
|
line := scanner.Bytes()
|
||||||
|
appendAPIResponseChunk(ctx, e.cfg, line)
|
||||||
|
|
||||||
|
// Parse SSE data
|
||||||
|
if bytes.HasPrefix(line, dataTag) {
|
||||||
|
data := bytes.TrimSpace(line[5:])
|
||||||
|
if bytes.Equal(data, []byte("[DONE]")) {
|
||||||
|
continue
|
||||||
|
}
|
||||||
|
if detail, ok := parseOpenAIStreamUsage(line); ok {
|
||||||
|
reporter.publish(ctx, detail)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
chunks := sdktranslator.TranslateStream(ctx, to, from, req.Model, bytes.Clone(opts.OriginalRequest), body, bytes.Clone(line), ¶m)
|
||||||
|
for i := range chunks {
|
||||||
|
out <- cliproxyexecutor.StreamChunk{Payload: []byte(chunks[i])}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
if errScan := scanner.Err(); errScan != nil {
|
||||||
|
recordAPIResponseError(ctx, e.cfg, errScan)
|
||||||
|
reporter.publishFailure(ctx)
|
||||||
|
out <- cliproxyexecutor.StreamChunk{Err: errScan}
|
||||||
|
} else {
|
||||||
|
reporter.ensurePublished(ctx)
|
||||||
|
}
|
||||||
|
}()
|
||||||
|
|
||||||
|
return stream, nil
|
||||||
|
}
|
||||||
|
|
||||||
|
// CountTokens is not supported for GitHub Copilot.
|
||||||
|
func (e *GitHubCopilotExecutor) CountTokens(_ context.Context, _ *cliproxyauth.Auth, _ cliproxyexecutor.Request, _ cliproxyexecutor.Options) (cliproxyexecutor.Response, error) {
|
||||||
|
return cliproxyexecutor.Response{}, statusErr{code: http.StatusNotImplemented, msg: "count tokens not supported for github-copilot"}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Refresh validates the GitHub token is still working.
|
||||||
|
// GitHub OAuth tokens don't expire traditionally, so we just validate.
|
||||||
|
func (e *GitHubCopilotExecutor) Refresh(ctx context.Context, auth *cliproxyauth.Auth) (*cliproxyauth.Auth, error) {
|
||||||
|
if auth == nil {
|
||||||
|
return nil, statusErr{code: http.StatusUnauthorized, msg: "missing auth"}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Get the GitHub access token
|
||||||
|
accessToken := metaStringValue(auth.Metadata, "access_token")
|
||||||
|
if accessToken == "" {
|
||||||
|
return auth, nil
|
||||||
|
}
|
||||||
|
|
||||||
|
// Validate the token can still get a Copilot API token
|
||||||
|
copilotAuth := copilotauth.NewCopilotAuth(e.cfg)
|
||||||
|
_, err := copilotAuth.GetCopilotAPIToken(ctx, accessToken)
|
||||||
|
if err != nil {
|
||||||
|
return nil, statusErr{code: http.StatusUnauthorized, msg: fmt.Sprintf("github-copilot token validation failed: %v", err)}
|
||||||
|
}
|
||||||
|
|
||||||
|
return auth, nil
|
||||||
|
}
|
||||||
|
|
||||||
|
// ensureAPIToken gets or refreshes the Copilot API token.
|
||||||
|
func (e *GitHubCopilotExecutor) ensureAPIToken(ctx context.Context, auth *cliproxyauth.Auth) (string, error) {
|
||||||
|
if auth == nil {
|
||||||
|
return "", statusErr{code: http.StatusUnauthorized, msg: "missing auth"}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Get the GitHub access token
|
||||||
|
accessToken := metaStringValue(auth.Metadata, "access_token")
|
||||||
|
if accessToken == "" {
|
||||||
|
return "", statusErr{code: http.StatusUnauthorized, msg: "missing github access token"}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Check for cached API token using thread-safe access
|
||||||
|
e.mu.RLock()
|
||||||
|
if cached, ok := e.cache[accessToken]; ok && cached.expiresAt.After(time.Now().Add(tokenExpiryBuffer)) {
|
||||||
|
e.mu.RUnlock()
|
||||||
|
return cached.token, nil
|
||||||
|
}
|
||||||
|
e.mu.RUnlock()
|
||||||
|
|
||||||
|
// Get a new Copilot API token
|
||||||
|
copilotAuth := copilotauth.NewCopilotAuth(e.cfg)
|
||||||
|
apiToken, err := copilotAuth.GetCopilotAPIToken(ctx, accessToken)
|
||||||
|
if err != nil {
|
||||||
|
return "", statusErr{code: http.StatusUnauthorized, msg: fmt.Sprintf("failed to get copilot api token: %v", err)}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Cache the token with thread-safe access
|
||||||
|
expiresAt := time.Now().Add(githubCopilotTokenCacheTTL)
|
||||||
|
if apiToken.ExpiresAt > 0 {
|
||||||
|
expiresAt = time.Unix(apiToken.ExpiresAt, 0)
|
||||||
|
}
|
||||||
|
e.mu.Lock()
|
||||||
|
e.cache[accessToken] = &cachedAPIToken{
|
||||||
|
token: apiToken.Token,
|
||||||
|
expiresAt: expiresAt,
|
||||||
|
}
|
||||||
|
e.mu.Unlock()
|
||||||
|
|
||||||
|
return apiToken.Token, nil
|
||||||
|
}
|
||||||
|
|
||||||
|
// applyHeaders sets the required headers for GitHub Copilot API requests.
|
||||||
|
func (e *GitHubCopilotExecutor) applyHeaders(r *http.Request, apiToken string) {
|
||||||
|
r.Header.Set("Content-Type", "application/json")
|
||||||
|
r.Header.Set("Authorization", "Bearer "+apiToken)
|
||||||
|
r.Header.Set("Accept", "application/json")
|
||||||
|
r.Header.Set("User-Agent", copilotUserAgent)
|
||||||
|
r.Header.Set("Editor-Version", copilotEditorVersion)
|
||||||
|
r.Header.Set("Editor-Plugin-Version", copilotPluginVersion)
|
||||||
|
r.Header.Set("Openai-Intent", copilotOpenAIIntent)
|
||||||
|
r.Header.Set("Copilot-Integration-Id", copilotIntegrationID)
|
||||||
|
r.Header.Set("X-Request-Id", uuid.NewString())
|
||||||
|
}
|
||||||
|
|
||||||
|
// normalizeModel is a no-op as GitHub Copilot accepts model names directly.
|
||||||
|
// Model mapping should be done at the registry level if needed.
|
||||||
|
func (e *GitHubCopilotExecutor) normalizeModel(_ string, body []byte) []byte {
|
||||||
|
return body
|
||||||
|
}
|
||||||
|
|
||||||
|
// isHTTPSuccess checks if the status code indicates success (2xx).
|
||||||
|
func isHTTPSuccess(statusCode int) bool {
|
||||||
|
return statusCode >= 200 && statusCode < 300
|
||||||
|
}
|
||||||
@@ -0,0 +1,129 @@
|
|||||||
|
package auth
|
||||||
|
|
||||||
|
import (
|
||||||
|
"context"
|
||||||
|
"fmt"
|
||||||
|
"time"
|
||||||
|
|
||||||
|
"github.com/router-for-me/CLIProxyAPI/v6/internal/auth/copilot"
|
||||||
|
"github.com/router-for-me/CLIProxyAPI/v6/internal/browser"
|
||||||
|
"github.com/router-for-me/CLIProxyAPI/v6/internal/config"
|
||||||
|
coreauth "github.com/router-for-me/CLIProxyAPI/v6/sdk/cliproxy/auth"
|
||||||
|
log "github.com/sirupsen/logrus"
|
||||||
|
)
|
||||||
|
|
||||||
|
// GitHubCopilotAuthenticator implements the OAuth device flow login for GitHub Copilot.
|
||||||
|
type GitHubCopilotAuthenticator struct{}
|
||||||
|
|
||||||
|
// NewGitHubCopilotAuthenticator constructs a new GitHub Copilot authenticator.
|
||||||
|
func NewGitHubCopilotAuthenticator() Authenticator {
|
||||||
|
return &GitHubCopilotAuthenticator{}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Provider returns the provider key for github-copilot.
|
||||||
|
func (GitHubCopilotAuthenticator) Provider() string {
|
||||||
|
return "github-copilot"
|
||||||
|
}
|
||||||
|
|
||||||
|
// RefreshLead returns nil since GitHub OAuth tokens don't expire in the traditional sense.
|
||||||
|
// The token remains valid until the user revokes it or the Copilot subscription expires.
|
||||||
|
func (GitHubCopilotAuthenticator) RefreshLead() *time.Duration {
|
||||||
|
return nil
|
||||||
|
}
|
||||||
|
|
||||||
|
// Login initiates the GitHub device flow authentication for Copilot access.
|
||||||
|
func (a GitHubCopilotAuthenticator) Login(ctx context.Context, cfg *config.Config, opts *LoginOptions) (*coreauth.Auth, error) {
|
||||||
|
if cfg == nil {
|
||||||
|
return nil, fmt.Errorf("cliproxy auth: configuration is required")
|
||||||
|
}
|
||||||
|
if opts == nil {
|
||||||
|
opts = &LoginOptions{}
|
||||||
|
}
|
||||||
|
|
||||||
|
authSvc := copilot.NewCopilotAuth(cfg)
|
||||||
|
|
||||||
|
// Start the device flow
|
||||||
|
fmt.Println("Starting GitHub Copilot authentication...")
|
||||||
|
deviceCode, err := authSvc.StartDeviceFlow(ctx)
|
||||||
|
if err != nil {
|
||||||
|
return nil, fmt.Errorf("github-copilot: failed to start device flow: %w", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
// Display the user code and verification URL
|
||||||
|
fmt.Printf("\nTo authenticate, please visit: %s\n", deviceCode.VerificationURI)
|
||||||
|
fmt.Printf("And enter the code: %s\n\n", deviceCode.UserCode)
|
||||||
|
|
||||||
|
// Try to open the browser automatically
|
||||||
|
if !opts.NoBrowser {
|
||||||
|
if browser.IsAvailable() {
|
||||||
|
if errOpen := browser.OpenURL(deviceCode.VerificationURI); errOpen != nil {
|
||||||
|
log.Warnf("Failed to open browser automatically: %v", errOpen)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
fmt.Println("Waiting for GitHub authorization...")
|
||||||
|
fmt.Printf("(This will timeout in %d seconds if not authorized)\n", deviceCode.ExpiresIn)
|
||||||
|
|
||||||
|
// Wait for user authorization
|
||||||
|
authBundle, err := authSvc.WaitForAuthorization(ctx, deviceCode)
|
||||||
|
if err != nil {
|
||||||
|
errMsg := copilot.GetUserFriendlyMessage(err)
|
||||||
|
return nil, fmt.Errorf("github-copilot: %s", errMsg)
|
||||||
|
}
|
||||||
|
|
||||||
|
// Verify the token can get a Copilot API token
|
||||||
|
fmt.Println("Verifying Copilot access...")
|
||||||
|
apiToken, err := authSvc.GetCopilotAPIToken(ctx, authBundle.TokenData.AccessToken)
|
||||||
|
if err != nil {
|
||||||
|
return nil, fmt.Errorf("github-copilot: failed to verify Copilot access - you may not have an active Copilot subscription: %w", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
// Create the token storage
|
||||||
|
tokenStorage := authSvc.CreateTokenStorage(authBundle)
|
||||||
|
|
||||||
|
// Build metadata with token information for the executor
|
||||||
|
metadata := map[string]any{
|
||||||
|
"type": "github-copilot",
|
||||||
|
"username": authBundle.Username,
|
||||||
|
"access_token": authBundle.TokenData.AccessToken,
|
||||||
|
"token_type": authBundle.TokenData.TokenType,
|
||||||
|
"scope": authBundle.TokenData.Scope,
|
||||||
|
"timestamp": time.Now().UnixMilli(),
|
||||||
|
}
|
||||||
|
|
||||||
|
if apiToken.ExpiresAt > 0 {
|
||||||
|
metadata["api_token_expires_at"] = apiToken.ExpiresAt
|
||||||
|
}
|
||||||
|
|
||||||
|
fileName := fmt.Sprintf("github-copilot-%s.json", authBundle.Username)
|
||||||
|
|
||||||
|
fmt.Printf("\nGitHub Copilot authentication successful for user: %s\n", authBundle.Username)
|
||||||
|
|
||||||
|
return &coreauth.Auth{
|
||||||
|
ID: fileName,
|
||||||
|
Provider: a.Provider(),
|
||||||
|
FileName: fileName,
|
||||||
|
Label: authBundle.Username,
|
||||||
|
Storage: tokenStorage,
|
||||||
|
Metadata: metadata,
|
||||||
|
}, nil
|
||||||
|
}
|
||||||
|
|
||||||
|
// RefreshGitHubCopilotToken validates and returns the current token status.
|
||||||
|
// GitHub OAuth tokens don't need traditional refresh - we just validate they still work.
|
||||||
|
func RefreshGitHubCopilotToken(ctx context.Context, cfg *config.Config, storage *copilot.CopilotTokenStorage) error {
|
||||||
|
if storage == nil || storage.AccessToken == "" {
|
||||||
|
return fmt.Errorf("no token available")
|
||||||
|
}
|
||||||
|
|
||||||
|
authSvc := copilot.NewCopilotAuth(cfg)
|
||||||
|
|
||||||
|
// Validate the token can still get a Copilot API token
|
||||||
|
_, err := authSvc.GetCopilotAPIToken(ctx, storage.AccessToken)
|
||||||
|
if err != nil {
|
||||||
|
return fmt.Errorf("token validation failed: %w", err)
|
||||||
|
}
|
||||||
|
|
||||||
|
return nil
|
||||||
|
}
|
||||||
@@ -14,6 +14,7 @@ func init() {
|
|||||||
registerRefreshLead("gemini", func() Authenticator { return NewGeminiAuthenticator() })
|
registerRefreshLead("gemini", func() Authenticator { return NewGeminiAuthenticator() })
|
||||||
registerRefreshLead("gemini-cli", func() Authenticator { return NewGeminiAuthenticator() })
|
registerRefreshLead("gemini-cli", func() Authenticator { return NewGeminiAuthenticator() })
|
||||||
registerRefreshLead("antigravity", func() Authenticator { return NewAntigravityAuthenticator() })
|
registerRefreshLead("antigravity", func() Authenticator { return NewAntigravityAuthenticator() })
|
||||||
|
registerRefreshLead("github-copilot", func() Authenticator { return NewGitHubCopilotAuthenticator() })
|
||||||
}
|
}
|
||||||
|
|
||||||
func registerRefreshLead(provider string, factory func() Authenticator) {
|
func registerRefreshLead(provider string, factory func() Authenticator) {
|
||||||
|
|||||||
@@ -379,6 +379,8 @@ func (s *Service) ensureExecutorsForAuth(a *coreauth.Auth) {
|
|||||||
s.coreManager.RegisterExecutor(executor.NewQwenExecutor(s.cfg))
|
s.coreManager.RegisterExecutor(executor.NewQwenExecutor(s.cfg))
|
||||||
case "iflow":
|
case "iflow":
|
||||||
s.coreManager.RegisterExecutor(executor.NewIFlowExecutor(s.cfg))
|
s.coreManager.RegisterExecutor(executor.NewIFlowExecutor(s.cfg))
|
||||||
|
case "github-copilot":
|
||||||
|
s.coreManager.RegisterExecutor(executor.NewGitHubCopilotExecutor(s.cfg))
|
||||||
default:
|
default:
|
||||||
providerKey := strings.ToLower(strings.TrimSpace(a.Provider))
|
providerKey := strings.ToLower(strings.TrimSpace(a.Provider))
|
||||||
if providerKey == "" {
|
if providerKey == "" {
|
||||||
@@ -720,6 +722,8 @@ func (s *Service) registerModelsForAuth(a *coreauth.Auth) {
|
|||||||
models = applyExcludedModels(models, excluded)
|
models = applyExcludedModels(models, excluded)
|
||||||
case "iflow":
|
case "iflow":
|
||||||
models = registry.GetIFlowModels()
|
models = registry.GetIFlowModels()
|
||||||
|
case "github-copilot":
|
||||||
|
models = registry.GetGitHubCopilotModels()
|
||||||
models = applyExcludedModels(models, excluded)
|
models = applyExcludedModels(models, excluded)
|
||||||
default:
|
default:
|
||||||
// Handle OpenAI-compatibility providers by name using config
|
// Handle OpenAI-compatibility providers by name using config
|
||||||
|
|||||||
Reference in New Issue
Block a user