stacklok / toolhive / 25098678238

66%

push

github

Extract shared OAuthTokenSource into pkg/auth/tokensource (#5090)

* Extract shared OAuthTokenSource into pkg/auth/tokensource

Both pkg/llm and pkg/registry/auth implemented the same three-tier
OAuth token strategy (in-memory cache → secrets-cached access token →
refresh token → browser OIDC/PKCE). This extracts that logic into a
single shared package, pkg/auth/tokensource, and rewires both consumers
as thin wrappers.

As a side effect, the registry path now wraps its restored token source
with PersistingTokenSource, matching the LLM path and ensuring rotated
refresh tokens are re-persisted after a cache restore.

Closes #5050

* fixes from review

---------

Co-authored-by: taskbot <taskbot@users.noreply.github.com>

246 of 296 new or added lines in 3 files covered. (83.11%)

60469 of 94443 relevant lines covered (64.03%)

59.23 hits per line