feat(auth): add hashed account ID to credential filenames for team plans

Luis Pater committed 9 months ago

Commit 059bfee1 parent 7beaf0e2 files · +15 −5Browse files

Unified · Split

2 files

 // CredentialFileName returns the filename used to persist Codex OAuth credentials.
 // When planType is available (e.g. "plus", "team"), it is appended after the email
 // as a suffix to disambiguate subscriptions.
-func CredentialFileName(email, planType string, includeProviderPrefix bool) string {
+func CredentialFileName(email, planType, hashAccountID string, includeProviderPrefix bool) string {
 	email = strings.TrimSpace(email)
 	plan := normalizePlanTypeForFilename(planType)
 	prefix := ""
 	if includeProviderPrefix {
-		prefix = "codex-"
+		prefix = "codex"
 	}
 	if plan == "" {
-		return fmt.Sprintf("%s%s.json", prefix, email)
+		return fmt.Sprintf("%s-%s.json", prefix, email)
+	} else if plan == "team" {
+		return fmt.Sprintf("%s-%s-%s-%s.json", prefix, hashAccountID, email, plan)
 	}
-	return fmt.Sprintf("%s%s-%s.json", prefix, email, plan)
+	return fmt.Sprintf("%s-%s-%s.json", prefix, email, plan)
 }
 func normalizePlanTypeForFilename(planType string) string {

 import (
 	"context"
+	"crypto/sha256"
+	"encoding/hex"
 	"fmt"
 	"net/http"
 	"strings"
 	}
 	planType := ""
+	hashAccountID := ""
 	if tokenStorage.IDToken != "" {
 		if claims, errParse := codex.ParseJWTToken(tokenStorage.IDToken); errParse == nil && claims != nil {
 			planType = strings.TrimSpace(claims.CodexAuthInfo.ChatgptPlanType)
+			accountID := strings.TrimSpace(claims.CodexAuthInfo.ChatgptAccountID)
+			if accountID != "" {
+				digest := sha256.Sum256([]byte(accountID))
+				hashAccountID = hex.EncodeToString(digest[:])[:8]
+			}
 		}
 	}
-	fileName := codex.CredentialFileName(tokenStorage.Email, planType, true)
+	fileName := codex.CredentialFileName(tokenStorage.Email, planType, hashAccountID, true)
 	metadata := map[string]any{
 		"email": tokenStorage.Email,
 	}