♻️ refactor: refactor the plugin api auth

src/app/api/plugin/gateway/route.ts

@@ -1,8 +1,10 @@
 import { createGatewayOnEdgeRuntime } from '@lobehub/chat-plugins-gateway';
 
+import { getJWTPayload } from '@/app/api/chat/auth';
 import { createErrorResponse } from '@/app/api/errorResponse';
 import { getServerConfig } from '@/config/server';
-import { getOpenAIAuthFromRequest } from '@/const/fetch';
+import { LOBE_CHAT_AUTH_HEADER, OAUTH_AUTHORIZED } from '@/const/auth';
+import { AgentRuntimeError } from '@/libs/agent-runtime';
 import { ChatErrorType, ErrorType } from '@/types/fetch';
 
 import { parserPluginSettings } from './settings';
@@ -33,9 +35,14 @@ const defaultPluginSettings = parserPluginSettings(PLUGIN_SETTINGS);
 const handler = createGatewayOnEdgeRuntime({ defaultPluginSettings, pluginsIndexUrl });
 
 export const POST = async (req: Request) => {
-  const { accessCode, oauthAuthorized } = getOpenAIAuthFromRequest(req);
+  // get Authorization from header
+  const authorization = req.headers.get(LOBE_CHAT_AUTH_HEADER);
+  const oauthAuthorized = !!req.headers.get(OAUTH_AUTHORIZED);
+  if (!authorization) throw AgentRuntimeError.createError(ChatErrorType.Unauthorized);
 
-  const result = checkAuth(accessCode, oauthAuthorized);
+  const payload = await getJWTPayload(authorization);
+
+  const result = checkAuth(payload.accessCode!, oauthAuthorized);
 
   if (!result.auth) {
     return createErrorResponse(result.error as ErrorType);

src/services/__tests__/chat.test.ts

@@ -574,10 +574,10 @@ Get data from users`,
 
       global.fetch = vi.fn(() => Promise.resolve(mockResponse));
 
-      const text = await chatService.runPluginApi(params, options);
+      const result = await chatService.runPluginApi(params, options);
 
       expect(global.fetch).toHaveBeenCalledWith(expect.any(String), expect.any(Object));
-      expect(text).toBe('Plugin Result');
+      expect(result).toBe('Plugin Result');
     });
 
     // Add more test cases to cover different scenarios and edge cases

src/services/chat.ts

@@ -145,12 +145,15 @@
     const settings = pluginSelectors.getPluginSettingsById(params.identifier)(s);
     const manifest = pluginSelectors.getPluginManifestById(params.identifier)(s);
 
-    const gatewayURL = manifest?.gateway;
+    const headers = await createHeaderWithAuth({
+      headers: { ...createHeadersWithPluginSettings(settings) },
+    });
 
-    const res = await fetch(gatewayURL ?? API_ENDPOINTS.gateway, {
+    const gatewayURL = manifest?.gateway ?? API_ENDPOINTS.gateway;
+
+    const res = await fetch(gatewayURL, {
       body: JSON.stringify({ ...params, manifest }),
-      // TODO: we can have a better auth way
-      headers: createHeadersWithPluginSettings(settings, createHeaderWithOpenAI()),
+      headers,
       method: 'POST',
       signal: options?.signal,
     });
@@ -172,8 +175,8 @@
   }: FetchAITaskResultParams) => {
     const errorHandle = (error: Error, errorContent?: any) => {
       onLoadingChange?.(false);
       if (abortController?.signal.aborted) {
         return;
       }
       onError?.(error, errorContent);
     };