revert: tea 1.0 rewrite (#1122–#1126) (#1146)

Reverts #1126, #1125, #1124, #1123 and #1122. `go.mod` keeps the Go 1.26 line with toolchain `go1.26.9` (instead of the original `go1.26.6`) so the security fix from #1131 isn't lost. reopens #69 reopens #141 reopens #162 reopens #172 reopens #197 reopens #232 reopens #240 reopens #246 reopens #323 reopens #325 reopens #326 reopens #328 reopens #344 reopens #351 reopens #373 reopens #403 reopens #406 reopens #417 reopens #430 reopens #457 reopens #480 reopens #482 reopens #489 reopens #490 reopens #498 reopens #500 reopens #504 reopens #510 reopens #516 reopens #523 reopens #556 reopens #560 reopens #569 reopens #571 reopens #602 reopens #632 reopens #633 reopens #643 reopens #666 reopens #670 reopens #672 reopens #677 reopens #683 reopens #697 reopens #726 reopens #737 reopens #770 reopens #779 reopens #804 reopens #817 reopens #831 reopens #833 reopens #834 reopens #908 reopens #966 reopens #1023 reopens #1029 reopens #1032 reopens #1050 reopens #1052 reopens #1069 reopens #1073 reopens #1087 reopens #1091 reopens #1094 reopens #1110 reopens #1115 reopens #1116 reopens #1118 Reviewed-on: https://gitea.com/gitea/tea/pulls/1146 Reviewed-by: TheFox0x7 <95654+thefox0x7@noreply.gitea.com>
2026-10-26 11:01:25 +01:00 · 2026-10-18 20:56:33 +00:00
1 parent 33bb12729e
commit c5f674111a
@@ -0,0 +1,72 @@
+// Copyright 2026 The Gitea Authors. All rights reserved.
+// SPDX-License-Identifier: MIT
+
+package config
+
+import (
+	"path/filepath"
+	"sync"
+	"time"
+
+	"github.com/adrg/xdg"
+	"github.com/go-signet/sdk-go/credstore"
+	"golang.org/x/oauth2"
+)
+
+var (
+	tokenStore     *credstore.SecureStore[credstore.Token]
+	tokenStoreOnce sync.Once
+
+	saveOAuthTokenToStore = func(loginName, accessToken, refreshToken string, expiresAt time.Time) error {
+		return getTokenStore().Save(loginName, credstore.Token{
+			AccessToken:  accessToken,
+			RefreshToken: refreshToken,
+			ExpiresAt:    expiresAt,
+			ClientID:     loginName,
+		})
+	}
+	deleteOAuthTokenFromStore = func(loginName string) error {
+		return getTokenStore().Delete(loginName)
+	}
+)
+
+func getTokenStore() *credstore.SecureStore[credstore.Token] {
+	tokenStoreOnce.Do(func() {
+		filePath := filepath.Join(xdg.ConfigHome, "tea", "credentials.json")
+		tokenStore = credstore.DefaultTokenSecureStore("tea-cli", filePath)
+	})
+	return tokenStore
+}
+
+// LoadOAuthToken loads OAuth tokens from the secure store.
+func LoadOAuthToken(loginName string) (*credstore.Token, error) {
+	tok, err := getTokenStore().Load(loginName)
+	if err != nil {
+		return nil, err
+	}
+	return &tok, nil
+}
+
+// SaveOAuthToken saves OAuth tokens to the secure store.
+func SaveOAuthToken(loginName, accessToken, refreshToken string, expiresAt time.Time) error {
+	return saveOAuthTokenToStore(loginName, accessToken, refreshToken, expiresAt)
+}
+
+// DeleteOAuthToken removes tokens from the secure store.
+func DeleteOAuthToken(loginName string) error {
+	return deleteOAuthTokenFromStore(loginName)
+}
+
+// SaveOAuthTokenFromOAuth2 saves an oauth2.Token to credstore, falling back to
+// the existing login's values for empty refresh token or zero expiry.
+func SaveOAuthTokenFromOAuth2(loginName string, token *oauth2.Token, login *Login) error {
+	refreshToken := token.RefreshToken
+	if refreshToken == "" {
+		refreshToken = login.GetRefreshToken()
+	}
+	expiry := token.Expiry
+	if expiry.IsZero() {
+		expiry = login.GetTokenExpiry()
+	}
+	return SaveOAuthToken(loginName, token.AccessToken, refreshToken, expiry)
+}