Ed Zynda bbf1106e27 Add OpenAI ChatGPT/Codex OAuth authentication alongside Anthropic auth ...

Implements OAuth authentication for OpenAI ChatGPT Plus/Pro (Codex) similar to pi:

- Add OpenAICredentials type with OAuth and API key support
- Add OpenAI OAuth client with correct endpoints (auth.openai.com)
- Implement PKCE-based OAuth flow with local callback server on :1455
- Add login/logout/status commands for openai provider
- Support both ChatGPT/Codex OAuth tokens (chatgpt.com/backend-api) and
  regular OpenAI API keys (api.openai.com)
- Extract and store ChatGPT account ID from JWT token
- Add custom HTTP transport with required Codex headers:
  - chatgpt-account-id, originator, OpenAI-Beta: responses=experimental
- Update provider selection to use correct endpoint based on auth type

Usage:
  kit auth login openai    # OAuth with ChatGPT account
  kit auth logout openai
  kit auth status

The implementation follows the same patterns as the existing Anthropic OAuth
support, with automatic token refresh and secure credential storage in
~/.config/.kit/credentials.json

2026-03-26 14:50:15 +03:00

..

browser.go

godoc

2025-11-12 16:48:46 +03:00

credentials_test.go

fix(auth): support OAuth credentials in ACP mode and auto-refresh tokens

2026-03-15 12:38:23 +03:00

credentials.go

Add OpenAI ChatGPT/Codex OAuth authentication alongside Anthropic auth

2026-03-26 14:50:15 +03:00

oauth.go

Add OpenAI ChatGPT/Codex OAuth authentication alongside Anthropic auth

2026-03-26 14:50:15 +03:00