oauth.do

OAuth authentication SDK and CLI for .do Platform.

Install

npm install oauth.do

CLI

npx oauth.do           # Login (default)
npx oauth.do login     # Login with device flow
npx oauth.do logout    # Logout
npx oauth.do whoami    # Show current user
npx oauth.do token     # Display token
npx oauth.do status    # Show auth status

SDK

import { auth, login, logout, getToken, isAuthenticated } from 'oauth.do'

// Check authentication
const { user, token } = await auth()

// Login
const result = await login({ email: '...', password: '...' })

// Logout
await logout(token)

// Get stored token
const token = getToken()

// Check if authenticated
if (await isAuthenticated()) { ... }

Build Auth URL

import { buildAuthUrl } from 'oauth.do'

const url = buildAuthUrl({
  redirectUri: 'https://myapp.com/callback',
  scope: 'openid profile email',
})

CLI Login Helper

For building CLIs that need authentication:

import { ensureLoggedIn } from 'oauth.do'

// Get token (prompts login if needed, auto-opens browser)
const { token, isNewLogin } = await ensureLoggedIn()

// Use token for API calls
const response = await fetch('https://api.example.com', {
  headers: { Authorization: `Bearer ${token}` }
})

Device Authorization Flow

import { authorizeDevice, pollForTokens } from 'oauth.do'

const auth = await authorizeDevice()
console.log('Visit:', auth.verification_uri)
console.log('Code:', auth.user_code)

const tokens = await pollForTokens(auth.device_code, auth.interval, auth.expires_in)

Token Storage

import { createSecureStorage, KeychainTokenStorage } from 'oauth.do'

// Auto-select best storage (keychain → secure file)
const storage = createSecureStorage()

// Or use keychain directly
const keychain = new KeychainTokenStorage()
if (await keychain.isAvailable()) {
  await keychain.setToken('...')
}

Storage backends:

• KeychainTokenStorage - OS keychain (macOS, Windows, Linux)
• SecureFileTokenStorage - ~/.oauth.do/token with 0600 permissions
• MemoryTokenStorage - In-memory (testing)
• LocalStorageTokenStorage - Browser localStorage

Configuration

import { configure } from 'oauth.do'

configure({
  apiUrl: 'https://apis.do',
  clientId: 'your-client-id',
  authKitDomain: 'login.oauth.do'
})

Environment Variables

• DO_TOKEN - Authentication token
• OAUTH_API_URL - API base URL (default: https://apis.do)
• OAUTH_CLIENT_ID - OAuth client ID
• OAUTH_AUTHKIT_DOMAIN - AuthKit domain (default: login.oauth.do)

License

MIT