shangguanxuan.sgx
00e5ce7367
fix(auth): skip recommend tui when no scopes remain
2026-06-25 11:23:08 +08:00
shangguanxuan.sgx
760c40dd71
Merge upstream main
2026-06-25 11:10:25 +08:00
shangguanxuan.sgx
00bef0a809
fix(auth): skip login scope tui when grants are complete
2026-06-24 21:53:18 +08:00
shangguanxuan.sgx
1ac8636418
fix(auth): restore login authorization selectors
2026-06-23 23:09:11 +08:00
shangguanxuan.sgx
86086437d8
fix(auth): default login to recommended cli authorization
2026-06-23 21:57:17 +08:00
shangguanxuan.sgx
a040b57be7
fix: stop auth login post-approval tui retry
2026-06-18 01:44:31 +08:00
shangguanxuan.sgx
d2fd7e00b5
fix: skip tui for recommend login
2026-06-17 18:47:51 +08:00
shangguanxuan.sgx
537719c677
fix: run recommend tui after login
2026-06-17 17:51:24 +08:00
shangguanxuan.sgx
2264743e78
fix: model recommend login tui chain
2026-06-17 16:47:16 +08:00
shangguanxuan.sgx
3ec35e30e8
fix: respect yes for recommend login grants
2026-06-17 15:50:42 +08:00
shangguanxuan.sgx
5e1983b3df
fix: align recommend tui interaction
2026-06-17 15:06:14 +08:00
shangguanxuan.sgx
70b9f39715
fix: use human recommend flow by default
2026-06-17 00:58:27 +08:00
shangguanxuan.sgx
9ee8ea5524
fix: show recommend selector by default
2026-06-17 00:34:23 +08:00
shangguanxuan.sgx
5a7c0748e3
feat: add recommend login product TUI
2026-06-16 23:19:24 +08:00
patrickmen
497e4f87d8
feat: support to disable auto open browser ( #365 )
2026-06-16 20:08:29 +08:00
shangguanxuan.sgx
11dfd4ccf2
feat: add dws recommended batch auth flow
2026-06-16 14:09:15 +08:00
4e58e45d30
feat(auth): add export/import for portable sandbox credentials ( #357 )
...
* feat(auth): add export/import for portable sandbox credentials
Enable migrating encrypted keychain and config between Linux sandboxes so refresh tokens survive beyond the 2-hour access token window.
Co-authored-by: Cursor <cursoragent@cursor.com >
* fix(auth): harden portable export/import per PR review
按 PR 审查意见加固可迁移认证包流程:macOS 默认 Keychain
场景拒绝导出;导入需 --force 覆盖已有登录态;解析 manifest
并在 OS 不匹配时告警;export 参数校验前置;flag 描述中文化;
移除已弃用的 tar.TypeRegA;导出文件后提示删除敏感包。
Co-authored-by: Cursor <cursoragent@cursor.com >
* fix(auth): require auth-token.enc before portable export
修复 staticcheck S1030(测试改用 exported.Bytes())。
导出前校验 auth-token.enc 存在,避免无登录态时生成
仅含 dek 的无效 bundle;CLI 提示先运行 dws auth login。
Co-authored-by: Cursor <cursoragent@cursor.com >
---------
Co-authored-by: 洛丘 <wangketing.wkt@antgroup.com >
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-29 09:19:11 +08:00
修雨
f78cc5c846
docs(auth): correct login help to reflect actual default + SSH guidance ( #226 ) ( #238 )
...
* docs(auth): correct login help to reflect actual default + SSH guidance (#226 )
The --help long description for `dws auth login` claimed the default mode was
"OAuth 设备流 (默认)", but the actual default starts a 127.0.0.1 loopback
listener (oauth_provider.go:131-136) and only switches to device flow when
--device is passed. SSH-into-headless-Linux users following the docs hit a
dead end because the local browser cannot reach 127.0.0.1 on the remote box.
Rewrite the description so each method is named after its real flag:
- OAuth Loopback 流 (默认)
- OAuth 设备流 (--device)
- 直接提供 Token (--token)
Add an explicit warning callout and a `--device` example for SSH/headless
environments. Also realign two flagErrorWithSuggestions strings in root.go
that propagated the same misconception ("默认使用设备流" → loopback default,
SSH 用户加 --device).
No behavioural change.
* docs(auth): drop emoji from login help warning
2026-05-09 09:25:57 +08:00
fantiu
eeb1782f7a
feat(api): add raw DingTalk OpenAPI command with dual-version token support
2026-04-24 16:40:13 +08:00
wxianfeng
0e72e89ba3
auth
2026-04-15 11:45:58 +08:00
xianfeng wang
5c0d2b274c
Merge branch 'DingTalk-Real-AI:main' into feature/wk_merge
2026-04-01 21:05:35 +08:00
fantiu
2a056cc5d0
feat(auth): persist OAuth credentials for reliable token refresh
2026-04-01 11:03:08 +08:00
wxianfeng
3c75c66d4d
chore: group pkg imports per goimports
...
Move pkg/config next to other pkg/* imports after local internal packages.
Made-with: Cursor
2026-03-31 15:32:50 +08:00
wxianfeng
93d6fdb17e
feat: edition layer for Wukong overlay; promote shared code to pkg/
...
Introduce a build-time edition hook so downstream overlays (e.g. Wukong)
can customize auth UX, config dir, static server list, visible products,
and extra root commands while keeping the default open-source behavior.
- Add pkg/edition (defaults) and pkg/editiontest contract tests; Makefile
target edition-test; CI job edition-tests.
- Root: optional RegisterExtraCommands with tool caller adapter; inject
static servers to skip market discovery when configured; deduplicate
top-level commands so overlay wins; extend hideNonDirectRuntimeCommands
with edition VisibleProducts and static commands (recovery/schema/mcp).
- Auth/config: gate login subcommand and auth login hints for embedded
editions; optional token auto-purge; edition ConfigDir override.
- version: human-readable multi-line output plus JSON with edition,
architecture, build, commit.
- Relocate internal/{config,convert,validate} to pkg/; add pkg/cli and
pkg/cmdutil (flags/time helpers).
- CI: optional notify-downstream job (GitLab trigger via secrets) on main
push; open_source_policy_test adjusted for new layout.
Secrets (repo settings): WUKONG_TRIGGER_TOKEN, WUKONG_TRIGGER_URL — optional;
if unset, downstream step is skipped.
Made-with: Cursor
2026-03-31 15:29:21 +08:00
fantiu
654bcc4ecb
feat(auth): persist client credentials for token refresh
...
When logging in with --client-id and --client-secret, credentials are now
automatically persisted to enable automatic token refresh after expiration.
Client secret is securely stored in system Keychain, config file only
contains a reference.
2026-03-30 11:34:11 +08:00
xiaojin.hxj
aa3f8f3990
feat: integrate open recovery workflow and bump v1.1.0
2026-03-28 20:41:56 +08:00
柏荣
a1dffe454d
逻辑优化
2026-03-28 17:51:22 +08:00
柏荣
045a3dcf31
优化auth命令
2026-03-27 22:13:02 +08:00
柏荣
cc04a082b1
init
2026-03-27 21:12:49 +08:00
tianlei.qjb
5f938d3675
init
2026-03-27 17:55:57 +08:00