Alexander
0df28e9dd8
- Unify duplicate uTLS transports into shared internal/transport package - Extract shared version constant into internal/version - Move LoadDefaultCredentials from config to auth (remove config→auth import) - Deduplicate handler.go: extract telemetry/error helpers (324→268 lines) - Break up main.go::run() into initCredential/initEmbedded - Eliminate logging.Config duplication (use config.LoggingConfig directly) - Extract logWriter to embedded/log.go, SSE fixtures to consts in sniff.go - Use uTLS client for usage polling (consistent TLS fingerprint) - Handle sjson.SetBytes errors in sanitize.go instead of silently swallowing - Document reverse-engineered magic values in billing.go - Unexport Credential.CooldownUntil (internal state) - Replace hardcoded auth bypass paths with map in server.go
57 lines
1.3 KiB
Go
57 lines
1.3 KiB
Go
package auth
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
"os"
|
|
"time"
|
|
)
|
|
|
|
// claudeCredentialsJSON matches the structure of ~/.claude/.credentials.json.
|
|
type claudeCredentialsJSON struct {
|
|
ClaudeAiOauth struct {
|
|
AccessToken string `json:"accessToken"`
|
|
RefreshToken string `json:"refreshToken"`
|
|
ExpiresAt int64 `json:"expiresAt"`
|
|
SubscriptionType string `json:"subscriptionType"`
|
|
} `json:"claudeAiOauth"`
|
|
}
|
|
|
|
// LoadDefaultCredentials reads credentials from ~/.claude/.credentials.json.
|
|
// Returns nil, nil if the file does not exist.
|
|
func LoadDefaultCredentials() ([]*Credential, error) {
|
|
path, err := DefaultCredentialPath()
|
|
if err != nil {
|
|
return nil, nil
|
|
}
|
|
|
|
data, err := os.ReadFile(path)
|
|
if err != nil {
|
|
if os.IsNotExist(err) {
|
|
return nil, nil
|
|
}
|
|
return nil, err
|
|
}
|
|
|
|
var cf claudeCredentialsJSON
|
|
if err := json.Unmarshal(data, &cf); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
oauth := cf.ClaudeAiOauth
|
|
if oauth.AccessToken == "" {
|
|
return nil, fmt.Errorf("no access token in %s", path)
|
|
}
|
|
|
|
cred := &Credential{
|
|
ID: "claude-native",
|
|
Email: oauth.SubscriptionType,
|
|
AccessToken: oauth.AccessToken,
|
|
RefreshToken: oauth.RefreshToken,
|
|
ExpiresAt: time.UnixMilli(oauth.ExpiresAt),
|
|
FilePath: path,
|
|
}
|
|
|
|
return []*Credential{cred}, nil
|
|
}
|