c10fc1e081
- Add pkce.ts with generatePKCE() using Web Crypto API - Update anthropic.ts, google-gemini-cli.ts, google-antigravity.ts - Replace Buffer.from() with atob() for base64 decoding - Works in both Node.js 20+ and browsers The OAuth modules still use Node.js http.createServer for callbacks, so they only work in CLI environments, but they no longer crash on import in browser bundles.
35 lines
997 B
TypeScript
35 lines
997 B
TypeScript
/**
|
|
* PKCE utilities using Web Crypto API.
|
|
* Works in both Node.js 20+ and browsers.
|
|
*/
|
|
|
|
/**
|
|
* Encode bytes as base64url string.
|
|
*/
|
|
function base64urlEncode(bytes: Uint8Array): string {
|
|
let binary = "";
|
|
for (const byte of bytes) {
|
|
binary += String.fromCharCode(byte);
|
|
}
|
|
return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
|
|
}
|
|
|
|
/**
|
|
* Generate PKCE code verifier and challenge.
|
|
* Uses Web Crypto API for cross-platform compatibility.
|
|
*/
|
|
export async function generatePKCE(): Promise<{ verifier: string; challenge: string }> {
|
|
// Generate random verifier
|
|
const verifierBytes = new Uint8Array(32);
|
|
crypto.getRandomValues(verifierBytes);
|
|
const verifier = base64urlEncode(verifierBytes);
|
|
|
|
// Compute SHA-256 challenge
|
|
const encoder = new TextEncoder();
|
|
const data = encoder.encode(verifier);
|
|
const hashBuffer = await crypto.subtle.digest("SHA-256", data);
|
|
const challenge = base64urlEncode(new Uint8Array(hashBuffer));
|
|
|
|
return { verifier, challenge };
|
|
}
|