can1357
e689351597
- Centralized OAuth access lifecycle in `AuthStorage`, returning identity metadata and new access-result types. - Added 60-second skew and strict expiry checks, returning undefined/throws for stale or expired OAuth credentials. - Removed provider-local token refresh flows from Gemini, Gemini CLI, Antigravity, Kimi, and related OAuth helpers. - Migrated web-search providers from `AgentStorage` to `AuthStorage` session-aware lookup with `authStorage`/`sessionId`/`signal` flow. - Replaced `findAnthropicAuth`/DB auth lookup with `buildAnthropicAuthConfig` and explicit base-url override/env fallback ordering.
63 lines
2.1 KiB
TypeScript
63 lines
2.1 KiB
TypeScript
import { describe, expect, it, vi } from "bun:test";
|
|
import type { AuthStorage } from "@oh-my-pi/pi-ai";
|
|
import { hookFetch } from "@oh-my-pi/pi-utils";
|
|
import { AgentStorage } from "../../../src/session/agent-storage";
|
|
import type { SearchParams } from "../../../src/web/search/providers/base";
|
|
import { searchCodex } from "../../../src/web/search/providers/codex";
|
|
|
|
function makeSseResponse(): string {
|
|
return [
|
|
`data: ${JSON.stringify({
|
|
type: "response.output_item.done",
|
|
item: {
|
|
type: "message",
|
|
content: [
|
|
{
|
|
type: "output_text",
|
|
text: "Broker-backed Codex answer",
|
|
annotations: [{ type: "url_citation", url: "https://example.com/broker", title: "Broker" }],
|
|
},
|
|
],
|
|
},
|
|
})}`,
|
|
"",
|
|
`data: ${JSON.stringify({
|
|
type: "response.completed",
|
|
response: { id: "resp_codex_broker", model: "gpt-5-codex-mini" },
|
|
})}`,
|
|
"",
|
|
].join("\n");
|
|
}
|
|
|
|
describe("Codex web search broker auth", () => {
|
|
it("uses AuthStorage.getOAuthAccess for token + account metadata without opening AgentStorage", async () => {
|
|
const getOAuthAccess = vi.fn(async () => ({
|
|
accessToken: "broker-refreshed-access-token",
|
|
accountId: "broker-account-id",
|
|
}));
|
|
const authStorage = { getOAuthAccess } as unknown as AuthStorage;
|
|
const openSpy = vi.spyOn(AgentStorage, "open");
|
|
let requestHeaders: Headers | undefined;
|
|
|
|
using _hook = hookFetch(async (_url, init) => {
|
|
requestHeaders = new Headers(init?.headers);
|
|
return new Response(makeSseResponse(), { status: 200, headers: { "Content-Type": "text/event-stream" } });
|
|
});
|
|
|
|
const params: SearchParams = {
|
|
query: "broker codex search",
|
|
systemPrompt: "Use web search.",
|
|
authStorage,
|
|
sessionId: "codex-broker-session",
|
|
};
|
|
|
|
const result = await searchCodex(params);
|
|
|
|
expect(result.provider).toBe("codex");
|
|
expect(getOAuthAccess).toHaveBeenCalledWith("openai-codex", "codex-broker-session", { signal: undefined });
|
|
expect(requestHeaders?.get("authorization")).toBe("Bearer broker-refreshed-access-token");
|
|
expect(requestHeaders?.get("chatgpt-account-id")).toBe("broker-account-id");
|
|
expect(openSpy).not.toHaveBeenCalled();
|
|
});
|
|
});
|