fix: bypass proxy for desktop auth callbacks

Author: joohw

electron/clovapi-desktop.js

@@ -163,6 +163,25 @@ function agentUninstall(kind) {
   return runDesktopAsync(["agents", "uninstall", "--cli", String(kind || "")], { timeout: 10 * 60 * 1000 });
 }
 
+function mergeNoProxy(value) {
+  const bypass = ["127.0.0.1", "localhost", "::1"];
+  const parts = String(value || "")
+    .split(",")
+    .map((part) => part.trim())
+    .filter(Boolean);
+  for (const host of bypass) {
+    if (!parts.some((part) => part.toLowerCase() === host.toLowerCase())) parts.push(host);
+  }
+  return parts.join(",");
+}
+
+function authLoginEnv() {
+  const env = { ...process.env };
+  env.NO_PROXY = mergeNoProxy(env.NO_PROXY);
+  env.no_proxy = mergeNoProxy(env.no_proxy);
+  return env;
+}
+
 function authStatus() {
   return runAuthAsync(["status"]);
 }
@@ -176,6 +195,7 @@ async function authLogin(provider) {
     cancelKey: providerId,
     onOutput: outputHandler,
     timeout: AUTH_LOGIN_TIMEOUT,
+    env: authLoginEnv(),
   });
   if (result.cancelled) {
     return { ok: false, cancelled: true, error: "已取消登录" };
@@ -228,4 +248,6 @@ module.exports = {
   cancelAuthLogin,
   authLogout,
   queryVendorUsage,
+  mergeNoProxy,
+  authLoginEnv,
 };

electron/clovapi-exec.test.js

@@ -6,6 +6,7 @@ const test = require("node:test");
 
 const { cliBinPath } = require("./config-paths");
 const { resolveClovapiExecutable, runClovapiArgsAsync } = require("./clovapi-exec");
+const { mergeNoProxy } = require("./clovapi-desktop");
 
 function withTempAppData(t) {
   const previousAppData = process.env.APPDATA;
@@ -97,3 +98,8 @@ test("runClovapiArgsAsync captures output without spawnSync", async (t) => {
   assert.equal(result.ok, true);
   assert.equal(result.stdout.trim(), "async:probe");
 });
+
+test("mergeNoProxy appends loopback hosts without dropping existing entries", () => {
+  assert.equal(mergeNoProxy("example.com, localhost"), "example.com,localhost,127.0.0.1,::1");
+});
+

electron/package-lock.json

@@ -1,7 +1,7 @@
 {
   "name": "clovapi-switcher",
   "private": true,
-  "version": "0.2.11",
+  "version": "0.2.12",
   "description": "ClovAPI Switcher desktop app",
   "main": "main.js",
   "type": "commonjs",