entelix-auth-claude-code 0.6.0

entelix Claude Code OAuth credential provider — reuses the Claude.ai access token managed by the Claude Code CLI for direct Anthropic API calls
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80

//! Configuration values for [`super::ClaudeCodeOAuthProvider`].

use std::time::Duration;

/// Canonical Claude.ai OAuth token endpoint.
pub const DEFAULT_TOKEN_URL: &str = "https://console.anthropic.com/v1/oauth/token";

/// Anthropic-beta capability gate the `claude` CLI sets on every
/// request.
///
/// Operators using [`super::ClaudeCodeOAuthProvider`] must also pass
/// this value through
/// [`entelix_core::ir::AnthropicExt::with_betas`] so the codec emits
/// the matching header — the credential surface and the codec
/// surface stay independent (single responsibility).
///
/// **Source of truth**: Anthropic's beta-header registry under
/// <https://platform.claude.com/docs/en/release-notes/overview>.
/// Anthropic versions beta capabilities by date stamp; if Claude
/// Code rolls a successor (e.g. `claude-code-2026XXXX`) bump this
/// constant in lockstep — the OAuth refresh flow stays unchanged.
pub const CLAUDE_CODE_BETA: &str = "claude-code-20250219";

/// Default refresh-call HTTP timeout.
pub const DEFAULT_REFRESH_TIMEOUT: Duration = Duration::from_secs(30);

/// Configuration for [`super::ClaudeCodeOAuthProvider`].
#[derive(Clone, Debug)]
#[non_exhaustive]
pub struct ClaudeCodeOAuthConfig {
    /// OAuth2 token endpoint URL. Defaults to
    /// [`DEFAULT_TOKEN_URL`].
    pub token_url: String,
    /// Optional OAuth client id sent with the `refresh_token`
    /// grant. The `claude` CLI omits this; supply a value only
    /// if your refresh-token policy requires one.
    pub client_id: Option<String>,
    /// HTTP timeout applied to refresh requests.
    pub refresh_timeout: Duration,
}

impl Default for ClaudeCodeOAuthConfig {
    fn default() -> Self {
        Self {
            token_url: DEFAULT_TOKEN_URL.to_owned(),
            client_id: None,
            refresh_timeout: DEFAULT_REFRESH_TIMEOUT,
        }
    }
}

impl ClaudeCodeOAuthConfig {
    /// Construct an empty config (`Self::default`).
    #[must_use]
    pub fn new() -> Self {
        Self::default()
    }

    /// Override the token endpoint URL — useful for staging
    /// environments or test mocks.
    #[must_use]
    pub fn with_token_url(mut self, url: impl Into<String>) -> Self {
        self.token_url = url.into();
        self
    }

    /// Set the OAuth client id sent with the refresh grant.
    #[must_use]
    pub fn with_client_id(mut self, client_id: impl Into<String>) -> Self {
        self.client_id = Some(client_id.into());
        self
    }

    /// Override the refresh-call HTTP timeout.
    #[must_use]
    pub const fn with_refresh_timeout(mut self, timeout: Duration) -> Self {
        self.refresh_timeout = timeout;
        self
    }
}