agent-radar
2ed3415fb7
Publish Claude Code Binaries / Stage and publish binaries (push) Canceled after 0s
Publish Tutti App Runtime / Build darwin-arm64 (push) Canceled after 0s
Publish Tutti App Runtime / Build darwin-amd64 (push) Canceled after 0s
Publish Tutti App Runtime / Build linux-amd64 (push) Canceled after 0s
Publish Tutti App Runtime / Build windows-amd64 (push) Canceled after 0s
Sync Tutti Agent Skills / sync (push) Canceled after 0s
Windows Agent Adapters / Test Windows agent adapters (push) Canceled after 0s
Windows Daemon Adapters / Test Windows daemon adapters (push) Canceled after 0s
Publish Tutti App Runtime / Publish runtime catalog (push) Canceled after 0s
74 lines
2.5 KiB
Markdown
74 lines
2.5 KiB
Markdown
# @tutti-os/auth-bridge
|
|
|
|
High-level Tutti auth helpers for browser apps and Node/Electron clients.
|
|
|
|
## Shared contract
|
|
|
|
Clients that implement their own platform-specific account UI can reuse the
|
|
canonical account defaults without importing Browser or Node runtime behavior:
|
|
|
|
```ts
|
|
import {
|
|
DEFAULT_ACCOUNT_BASE_URL,
|
|
DEFAULT_APP_ID
|
|
} from "@tutti-os/auth-bridge/shared";
|
|
```
|
|
|
|
Keep compatibility identifiers in this shared contract rather than copying
|
|
their literal values into product clients.
|
|
|
|
## Browser
|
|
|
|
```ts
|
|
import { createTuttiBrowserAuthClient } from "@tutti-os/auth-bridge/browser";
|
|
|
|
const auth = createTuttiBrowserAuthClient();
|
|
|
|
auth.login();
|
|
const user = await auth.getUserInfo();
|
|
await auth.logout();
|
|
```
|
|
|
|
## Node
|
|
|
|
```ts
|
|
import { createTuttiNodeAuthClient } from "@tutti-os/auth-bridge/node";
|
|
|
|
const auth = createTuttiNodeAuthClient({
|
|
authJsonPath,
|
|
appCallbackUrl,
|
|
accountHeaders: { "x-environment-lane": "example" }
|
|
});
|
|
|
|
const { session, user } = await auth.login();
|
|
```
|
|
|
|
`accountHeaders` adds host-owned headers to Account API requests. The bridge
|
|
always owns and overwrites its JSON content negotiation and Desktop session
|
|
cookie headers.
|
|
|
|
## Local Desktop Callback
|
|
|
|
The Node bridge starts a loopback HTTP server for desktop sign-in. New desktop OAuth completions use:
|
|
|
|
- `GET /oauth/callback?state=<base64url>&transfer_code=<code>`
|
|
- `GET /oauth/callback?state=<base64url>&error=<providerError>`
|
|
- `GET /oauth/callback?state=<base64url>&error=user_cancelled`
|
|
|
|
The callback validates the signed login state, redeems the desktop transfer code through the account service, writes `auth.json`, fetches user info, and redirects the browser back to the web result page:
|
|
|
|
```text
|
|
/auth/login/callback?desktopBridgeStatus=success&openAppUrl=<safe-deeplink>
|
|
/auth/login/callback?desktopBridgeStatus=error&desktopBridgeError=<safeCode>&openAppUrl=<safe-deeplink>
|
|
```
|
|
|
|
`openAppUrl` is only used to focus or reopen Tutti. It is sanitized to the allowed app schemes and must not carry `transfer_code`, sessions, or tokens.
|
|
|
|
An explicit `user_cancelled` callback is preserved as a typed cancellation for
|
|
Node/Go consumers and returns the safe Web result code `userCancelled`.
|
|
Cancellation results intentionally omit `openAppUrl`, so the Web result page
|
|
can keep the user in the browser. Other callback errors continue to use the
|
|
safe `providerError` result code.
|
|
|
|
`/oauth/health` and `POST /oauth/complete` remain available for compatibility with older web clients, but the current web flow redirects the browser to `/oauth/callback` instead of fetching the local bridge.
|