User plugins: allow Aside cookie import for a custom Qiniu quota plugin

クローズ
#4,792 コメント 1 件 リアクション 1 件 担当者 0 名 GitHub で見る

メンテナーはふだん 1 日以内に返信

@steipete がすでに取り組んでいます。

2026年10月30日 から。

  • #4858 @steipete による — オープン

評価

難易度
4/5
見積もり時間
1〜2日
初心者へのやさしさ
55/100
issue の種類
機能追加
明瞭さ
明確に書かれている
活発さ
活発
技術スタック
swift

調査の方向性

Start by reading BrowserCookieImportSupport.importOrder(for:), then trace how UserProviderPluginCookieBroker applies the user-plugin browser policy and review the plugin documentation that describes Chrome-only imports. Check the existing Aside importer and tests for browser selection and declared-domain approval. Done means a custom Qiniu plugin can use the current Aside session while preserving manual Cookie fallback and the stated safeguards against background Keychain prompts.

索引モデルが issue の本文から書いたものです。

説明

clawsweeper:needs-product-decision clawsweeper:needs-security-review clawsweeper:no-new-fix-pr clawsweeper:source-repro impact:auth-provider impact:ux-friction issue-rating: 🦞 diamond lobster P2

Request

Please let user-installed provider plugins import cookies from supported browsers such as Aside, rather than restricting them to Chrome. An explicit browser/profile selection would also work.

My use case is a custom Qiniu Cloud Conatus quota plugin. I use Aside for the Qiniu console and want to keep standard CodexBar/Homebrew updates, without maintaining a locally rebuilt app.

Current behavior

  • The plugin originally used a manually pasted Qiniu console Cookie.
  • When that session became invalid, the official read-only quota endpoint returned HTTP 401.
  • Signing back into Qiniu in Aside restored HTTP 200 in the browser, but the plugin needed its copied Cookie updated separately.
  • Switching the plugin to ctx.browser.cookieHeader("portal.qiniu.com") cannot reuse Aside through the current user-plugin browser policy, even though SweetCookieKit already supports Aside.

This does not establish that every new login invalidates older sessions; the verified issue is the expired copied session and the inability to follow the current Aside session automatically.

Source checked

In 0.81.0 (ee890b5), and in the current default-branch file checked when filing:

  • BrowserCookieImportSupport.importOrder(for:) falls back to [.chrome] when there is no built-in provider.
  • User plugins reach this path through UserProviderPluginCookieBroker.
  • The plugin documentation also describes Chrome-only imports for user plugins.

A local diagnostic using the existing Aside importer and a modified user-plugin resolver successfully fetched the Qiniu quota through the native plugin runtime. No modified CodexBar app has been installed.

Expected behavior

For this Qiniu plugin, after I sign in again in Aside, refreshing CodexBar should use the current browser session without requiring another manual Cookie copy. Please retain declared-domain approval, manual Cookie fallback, and the existing safeguards against background Keychain prompts.

This request is for the cookie access needed by a custom Qiniu quota plugin, not for a new bundled Qiniu provider or unrelated provider integrations.

Related: #4215 covered adding missing browsers to the underlying catalog; this request concerns the remaining Chrome-only restriction for user-installed plugins.

AI-assisted investigation and drafting; no credentials or account identifiers are included.

主要言語
Swift
スター
22.9k
フォーク
2.2k
平均マージ
1日 58分
マージ済み PR(30日)
387

環境構築

このプロジェクトには開発コンテナ、Dockerfile、コントリビューションガイドがありません。まず README を読み、一般的な手順ははじめてのコントリビューションガイドを参照してください。

はじめの一歩

  1. issue を最後まで読み、次にプロジェクトのコントリビューションガイドを読みます。
  2. 着手することを issue にコメントします — 二人が同じ作業をするのを防げます。
  3. リポジトリをフォークし、ブランチを切って変更します。
  4. issue 番号を参照したプルリクエストを送ります。

steipete/CodexBar のほかの issue

steipete/CodexBar の issue をすべて見る

似ている issue

Swift の issue をもっと見る

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。