anomalyco/opencode
1
0
Fork 0
mirror of https://github.com/anomalyco/opencode.git synced 2026-07-22 10:15:31 -04:00
Code Issues 5.9k Packages Projects Releases 19 Wiki Activity

User auth plugins cannot override built-in plugins in CLI auth flow #8142

New Issue
Closed
opened 2026-02-16 18:09:16 -05:00 by yindo · 1 comment
yindo commented 2026-02-16 18:09:16 -05:00
Owner
Copy Link
Copy Source

Originally created by @JosXa on GitHub (Jan 31, 2026).

Originally assigned to: @thdxr on GitHub.

Problem

When attempting to override the built-in GitHub Copilot auth plugin with a user/external plugin, the override doesn't work for opencode auth login. The built-in plugin always takes precedence in the CLI.

Root Cause

Plugin.list() returns internal plugins first, then user plugins. The CLI auth commands in packages/opencode/src/cli/cmd/auth.ts use .find() which returns the first match. Since internal plugins come first, the built-in plugin always wins.

Meanwhile, ProviderAuth.methods() (used by TUI) uses fromEntries() which is last-wins, so user plugins can override there.

This inconsistency means:

  • TUI: User plugins can override built-in auth ✅
  • CLI: User plugins cannot override built-in auth ❌

Expected Behavior

User/external plugins should be able to fully override built-in auth behavior (e.g., a company plugin replacing the default GitHub Copilot OAuth flow with a custom enterprise auth).

Reproduction

  1. Create a user plugin that registers auth.provider: "github-copilot" with a custom auth method
  2. Run opencode auth login github-copilot
  3. The built-in OAuth flow runs instead of the custom method
Originally created by @JosXa on GitHub (Jan 31, 2026). Originally assigned to: @thdxr on GitHub. ## Problem When attempting to override the built-in GitHub Copilot auth plugin with a user/external plugin, the override doesn't work for `opencode auth login`. The built-in plugin always takes precedence in the CLI. ## Root Cause `Plugin.list()` returns internal plugins first, then user plugins. The CLI auth commands in `packages/opencode/src/cli/cmd/auth.ts` use `.find()` which returns the first match. Since internal plugins come first, the built-in plugin always wins. Meanwhile, `ProviderAuth.methods()` (used by TUI) uses `fromEntries()` which is last-wins, so user plugins can override there. This inconsistency means: - **TUI**: User plugins can override built-in auth ✅ - **CLI**: User plugins cannot override built-in auth ❌ ## Expected Behavior User/external plugins should be able to fully override built-in auth behavior (e.g., a company plugin replacing the default GitHub Copilot OAuth flow with a custom enterprise auth). ## Reproduction 1. Create a user plugin that registers `auth.provider: "github-copilot"` with a custom auth method 2. Run `opencode auth login github-copilot` 3. The built-in OAuth flow runs instead of the custom method
yindo closed this issue 2026-02-16 18:09:16 -05:00
yindo commented 2026-02-16 18:09:16 -05:00
Author
Owner
Copy Link
Copy Source

@github-actions[bot] commented on GitHub (Jan 31, 2026):

This issue might be a duplicate of existing issues. Please check:

  • #10898: Inconsistent Provider/Plugin Selection Between CLI and TUI (.find() vs fromEntries()) - EXACT ROOT CAUSE MATCH
  • #10063: Plugin OAuth auth methods silently ignored (shadowed by other plugins)
  • #6261: Multiple plugins registering auth for the same provider silently overwrite each other
  • #8297: Plugin installation failures are silent, causing OAuth options to disappear
  • #3936: Github Enterprise authorization (enterprise auth customization use case)
  • #11159: Plugin deduplication incorrectly removes plugins with index.js entry points
  • #10115: Only the last plugin loads in OpenCode 1.1.32 - Multiple plugins not supported

Feel free to ignore if none of these address your specific case.

@github-actions[bot] commented on GitHub (Jan 31, 2026): This issue might be a duplicate of existing issues. Please check: - #10898: Inconsistent Provider/Plugin Selection Between CLI and TUI (.find() vs fromEntries()) - **EXACT ROOT CAUSE MATCH** - #10063: Plugin OAuth auth methods silently ignored (shadowed by other plugins) - #6261: Multiple plugins registering auth for the same provider silently overwrite each other - #8297: Plugin installation failures are silent, causing OAuth options to disappear - #3936: Github Enterprise authorization (enterprise auth customization use case) - #11159: Plugin deduplication incorrectly removes plugins with index.js entry points - #10115: Only the last plugin loads in OpenCode 1.1.32 - Multiple plugins not supported Feel free to ignore if none of these address your specific case.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
acp
bad
bug
discussion
docs
documentation
enhancement
extension
good first issue
growth
help-wanted
mcp
model-problem
needs:compliance
nix
opentui
perf
pull-request
Mirrored from GitHub Pull Request
 tui
web
windows
zen
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#8142
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?