Repository navigation

feat: move authentication from PHP to Go - #195

Open

pjcdawkins wants to merge 34 commits into

mainfrom

claude/auth-php-go-migration-0354ec

Commits on Oct 1, 2026

feat(config): read auth settings like the legacy CLI

pjcdawkins
and
claude
committed
7bb5882
feat(auth): add a Go credential store

pjcdawkins
and
claude
committed
2867d32
feat(auth): refresh tokens in Go under a lock

pjcdawkins
and
claude
committed
cd85366
feat: move the auth commands to Go

pjcdawkins
and
claude
committed
cd88186
feat(legacy): get tokens and auth state from Go

pjcdawkins
and
claude
committed
de9dc09
fix: match the legacy CLI's api-token-login and --max-age errors

pjcdawkins
and
claude
committed
0cd3ea5
test: cover migration, refresh concurrency, crashes and step-up

pjcdawkins
and
claude
committed
57b6cb0
chore: fix lint findings

pjcdawkins
and
claude
committed
9722662
docs: describe the Go auth stack

pjcdawkins
and
claude
committed
4cf36a7
test: skip the permission check on Windows

pjcdawkins
and
claude
committed
afb58b9
fix: list only a native command's own and visible options in help

pjcdawkins
and
claude
committed
8fb68f5
fix(auth): address review findings

pjcdawkins
and
claude
committed
a5767fa
fix(auth): address PR review comments

pjcdawkins
and
claude
committed
525f5b5
perf(auth): skip the legacy export when it is not needed

pjcdawkins
and
claude
committed
abc7f78
refactor(auth): shrink the legacy login hook and drop the logout hook

pjcdawkins
and
claude
committed
407a084
fix(legacy): replace the placeholder token when a client needs a login

pjcdawkins
and
claude
committed
74173cf
test: cover login prompts, login and logout effects, 401s and session switches

pjcdawkins
and
claude
committed
8e91ce6
fix(config): resolve the home and writable dirs like the legacy CLI

pjcdawkins
and
claude
committed
05b1dcf
fix(config): choose the writable dir by permissions, like the legacy CLI

pjcdawkins
and
claude
committed
dab68d7
test(config): cover a file in place of the writable dir

pjcdawkins
and
claude
committed
84eb0cf
test(config): set the temp dir on Windows too

pjcdawkins
and
claude
committed
964a140
fix(legacy): stop abbreviations from running the internal auth commands

pjcdawkins
and
claude
committed
5d4130d
fix(legacy): keep the internal auth commands hidden once loaded

pjcdawkins
and
claude
committed
cb81ed4

Commits on Oct 2, 2026

fix(auth): do not retry a refresh request after it was sent

pjcdawkins
and
claude
committed
ebca841
fix(config): read API token and lock settings from the base config

pjcdawkins
and
claude
committed
b1275c3
fix(auth): forget the API token session too during keychain recovery

pjcdawkins
and
claude
committed
6dee32a
test(integration): expect no retry after a refresh request is sent

pjcdawkins
and
claude
committed
a739acf
feat(auth): let the system choose the local login server's port

pjcdawkins
and
claude
committed
cafbbd9
fix(auth): pass a rejected access token via stdin, not argv

pjcdawkins
and
claude
committed
c6c2d51
fix(auth): wait for keychain changes instead of timing out

pjcdawkins
and
claude
committed
1cdc070
fix(auth): delete session files when a refresh logs the user out

pjcdawkins
and
claude
committed
77a2ef1
fix: let --verbose and --debug override --quiet for errors

pjcdawkins
and
claude
committed
d8c7639
fix(auth): keep session files whose keychain secrets were not deleted

pjcdawkins
and
claude
committed
fbd8139
test(integration): stub the macOS browser launcher too

pjcdawkins
and
claude
committed
eafc7ba

Navigation Menu

Repository navigation

feat: move authentication from PHP to Go - #195

feat: move authentication from PHP to Go#195
pjcdawkins wants to merge 34 commits into
mainfrom
claude/auth-php-go-migration-0354ec

Commits on Oct 1, 2026

feat(config): read auth settings like the legacy CLI

feat(auth): add a Go credential store

feat(auth): refresh tokens in Go under a lock

feat: move the auth commands to Go

feat(legacy): get tokens and auth state from Go

fix: match the legacy CLI's api-token-login and --max-age errors

test: cover migration, refresh concurrency, crashes and step-up

chore: fix lint findings

docs: describe the Go auth stack

test: skip the permission check on Windows

fix: list only a native command's own and visible options in help

fix(auth): address review findings

fix(auth): address PR review comments

perf(auth): skip the legacy export when it is not needed

refactor(auth): shrink the legacy login hook and drop the logout hook

fix(legacy): replace the placeholder token when a client needs a login

test: cover login prompts, login and logout effects, 401s and session switches

fix(config): resolve the home and writable dirs like the legacy CLI

fix(config): choose the writable dir by permissions, like the legacy CLI

test(config): cover a file in place of the writable dir

test(config): set the temp dir on Windows too

fix(legacy): stop abbreviations from running the internal auth commands

fix(legacy): keep the internal auth commands hidden once loaded

Commits on Oct 2, 2026

fix(auth): do not retry a refresh request after it was sent

fix(config): read API token and lock settings from the base config

fix(auth): forget the API token session too during keychain recovery

test(integration): expect no retry after a refresh request is sent

feat(auth): let the system choose the local login server's port

fix(auth): pass a rejected access token via stdin, not argv

fix(auth): wait for keychain changes instead of timing out

fix(auth): delete session files when a refresh logs the user out

fix: let --verbose and --debug override --quiet for errors

fix(auth): keep session files whose keychain secrets were not deleted

test(integration): stub the macOS browser launcher too