ewilliams28/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-08-27 12:56:01 -06:00
Code Issues Packages Projects Releases Wiki Activity

refactor: share oauth identity safety check

Browse Source
This commit is contained in:
Vincent Koc
2026-05-30 12:58:53 +02:00
parent c2f0d811e7
commit 8bcdab8933
1 changed files with 27 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/agents/auth-profiles/oauth-shared.ts
+27 -29
View File
@@ -97,12 +97,18 @@ export function hasMatchingOAuthIdentity(
return false;
}
export function isSafeToOverwriteStoredOAuthIdentity(
type OAuthIdentitySafetyPolicy = {
whenExistingCredentialMissing: boolean;
whenExistingIdentityMissing: boolean;
};
function isSafeOAuthIdentityTransition(
existing: OAuthCredential | undefined,
incoming: OAuthCredential,
policy: OAuthIdentitySafetyPolicy,
): boolean {
if (!existing || existing.type !== "oauth") {
return true;
return policy.whenExistingCredentialMissing;
}
if (existing.provider !== incoming.provider) {
return false;
@@ -111,47 +117,39 @@ export function isSafeToOverwriteStoredOAuthIdentity(
return true;
}
if (!hasOAuthIdentity(existing)) {
return false;
return policy.whenExistingIdentityMissing;
}
return hasMatchingOAuthIdentity(existing, incoming);
}
export function isSafeToOverwriteStoredOAuthIdentity(
existing: OAuthCredential | undefined,
incoming: OAuthCredential,
): boolean {
return isSafeOAuthIdentityTransition(existing, incoming, {
whenExistingCredentialMissing: true,
whenExistingIdentityMissing: false,
});
}
export function isSafeToAdoptBootstrapOAuthIdentity(
existing: OAuthCredential | undefined,
incoming: OAuthCredential,
): boolean {
if (!existing || existing.type !== "oauth") {
return true;
}
if (existing.provider !== incoming.provider) {
return false;
}
if (areOAuthCredentialsEquivalent(existing, incoming)) {
return true;
}
if (!hasOAuthIdentity(existing)) {
return true;
}
return hasMatchingOAuthIdentity(existing, incoming);
return isSafeOAuthIdentityTransition(existing, incoming, {
whenExistingCredentialMissing: true,
whenExistingIdentityMissing: true,
});
}
export function isSafeToAdoptMainStoreOAuthIdentity(
existing: OAuthCredential | undefined,
incoming: OAuthCredential,
): boolean {
if (!existing || existing.type !== "oauth") {
return false;
}
if (existing.provider !== incoming.provider) {
return false;
}
if (areOAuthCredentialsEquivalent(existing, incoming)) {
return true;
}
if (!hasOAuthIdentity(existing)) {
return true;
}
return hasMatchingOAuthIdentity(existing, incoming);
return isSafeOAuthIdentityTransition(existing, incoming, {
whenExistingCredentialMissing: false,
whenExistingIdentityMissing: true,
});
}
export function shouldBootstrapFromExternalCliCredential(params: {