8b7252dad4
Go app for capturing and archiving HSA-eligible receipts: OIDC/PKCE auth against Authelia, SQLite storage with dual-write (filesystem + DB blob), mobile-first upload, and DB export. Adds AI receipt classification: a config.json catalog of people and categories (seeded into the DB on startup), a prompt builder that derives name-order/initial variants from the data (with same-surname ambiguity handling), and an Anthropic tool-use client behind POST /classify. Tests run against a mock endpoint; a live integration test is env-gated to the cheapest model. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
14 lines
583 B
Go
14 lines
583 B
Go
package auth
|
|
|
|
import "golang.org/x/oauth2"
|
|
|
|
// AuthorizeURL builds the Authelia authorization redirect URL with PKCE and state.
|
|
// challenge must be the pre-computed S256 value from ChallengeS256(verifier).
|
|
// Extra options (e.g. the OIDC nonce) may be passed via opts.
|
|
func AuthorizeURL(cfg *oauth2.Config, state, challenge string, opts ...oauth2.AuthCodeOption) string {
|
|
args := append([]oauth2.AuthCodeOption{
|
|
oauth2.SetAuthURLParam("code_challenge", challenge),
|
|
oauth2.SetAuthURLParam("code_challenge_method", "S256"),
|
|
}, opts...)
|
|
return cfg.AuthCodeURL(state, args...)
|
|
}
|