Function getAuthHeaders

src/utils/http.ts:73–127

()

 * Returns either OAuth headers for Max/Pro users or API key headers for regular users
 */
export function getAuthHeaders(): AuthHeaders {
  const session = getAuthRuntime().getCurrentSession()

  if (session.principalSource === 'managed_oauth') {
    if (session.sessionState !== 'usable' || !session.accessToken) {
      return {
        headers: {},
        error: 'No usable OAuth token available',
      }
    }
    return {
      headers: {
        Authorization: `Bearer ${session.accessToken}`,
        'anthropic-beta': OAUTH_BETA_HEADER,
      },
    }
  }

  if (
    (session.principalSource === 'service_oauth_env' ||
      session.principalSource === 'service_oauth_fd' ||
      session.principalSource === 'external_bearer_compat') &&
    session.accessToken
  ) {
    return {
      headers: {
        Authorization: `Bearer ${session.accessToken}`,
        'anthropic-beta': OAUTH_BETA_HEADER,
      },
    }
  }

  if (
    (session.principalSource === 'direct_api_key_env' ||
      session.principalSource === 'console_api_key' ||
      session.principalSource === 'api_key_helper') &&
    session.rawApiKeySource !== 'OPENAI_API_KEY' &&
    session.apiKey
  ) {
    return {
      headers: {
        'x-api-key': session.apiKey,
      },
    }
  }

  return {
    headers: {},
    error:
      session.principalSource === 'managed_oauth' ||
      session.headersKind === 'bearer'
        ? 'No usable OAuth token available'
        : 'No API key available',
  }
}

/**
 * Wrapper that handles OAuth 401 errors by force-refreshing the token and