hansjone/oclaw
1
0
Fork 0
mirror of https://github.com/hansjone/oclaw.git synced 2026-10-16 16:40:47 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add parallel skill credential path to uds-auth for agent/cron use.

Browse source 
UI session behavior stays unchanged; login writes a separate skill cache, with optional retain-on-logout and loopback agent-credentials/outbound APIs plus helpers/docs.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
oliver 2026-09-08 23:01:11 +08:00
parent 564d6ac189
commit 64761c8300
13 changed files with 798 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

12
uds-auth/lib/middleware/auth-middleware.js
View file

@ -11,8 +11,13 @@ import { searchUserByEmpNoToken } from '../uds/user-search.js'
* 出站请求绕过 HTTP(S)_PROXY。
*
* 兜底登录：仅认可已由 /api/fallback/login 写好的 administrator 会话。
*
* 可选 onSkillCredentials(empNo, token)：UI 会话写入成功后并行写入 skill 凭证缓存。
*/
export function createAuthMiddleware(config, sessionStore, rolesStore) {
export function createAuthMiddleware(config, sessionStore, rolesStore, hooks = {}) {
const onSkillCredentials = typeof hooks.onSkillCredentials === 'function'
? hooks.onSkillCredentials
: null
const udsClient = new UdsClient(config.udsAuth)
const validatorConfig = {
...config.udsAuth,
@ -107,6 +112,7 @@ export function createAuthMiddleware(config, sessionStore, rolesStore) {
Math.floor(cookieMaxAge / 1000),
userContext,
)
try { onSkillCredentials?.(profile.empNo, credentials.token) } catch { /* ignore */ }
} else {
// 查不到资料则作废 trust 会话，避免“假登录”
await sessionStore.delete(extracted.empNo)
@ -127,6 +133,9 @@ export function createAuthMiddleware(config, sessionStore, rolesStore) {
userContext,
)
}
if (userContext.token) {
try { onSkillCredentials?.(extracted.empNo, userContext.token) } catch { /* ignore */ }
}
const role = await resolveRole(extracted.empNo, extracted.kind)
ctx.userContext = userContext
ctx.empNo = extracted.empNo
@ -172,6 +181,7 @@ export function createAuthMiddleware(config, sessionStore, rolesStore) {
Math.floor(cookieMaxAge / 1000),
userContext,
)
try { onSkillCredentials?.(profile.empNo, credentials.token) } catch { /* ignore */ }
const role = await resolveRole(profile.empNo, 'uds')
ctx.userContext = userContext