feat: add manual token authentication for Firebase Studio support #7724

roomote · 2025-09-06T01:30:09Z

Description

This PR adds support for manual token authentication to enable users of Firebase Studio and other IDEs that don't support automatic authentication redirects to authenticate with Roo Code Cloud.

Problem

As reported in #7723, Firebase Studio users cannot authenticate with Roo Code Cloud because there's no Firebase Studio button on the authentication page to redirect back to the IDE. This prevents Firebase Studio users from using the Roo Cloud provider.

Solution

Added a manual token input option that allows users to:

Copy the token from the authentication page URL
Paste it directly into the extension
Authenticate without needing the redirect flow

Changes

✨ Added expandable manual token input UI to CloudView component
📝 Added new WebviewMessage type 'rooCloudManualToken' with token field
🔧 Implemented handleManualToken method in WebAuthService to process manual tokens
🔧 Added CloudService.handleManualToken method to route manual token auth
📝 Updated webviewMessageHandler to handle manual token submission
🌐 Added translation strings for manual token UI elements

Testing

Linting and type checking pass
Manual testing can be done by:
1. Opening the Cloud settings
2. Clicking 'Having trouble? Enter token manually'
3. Pasting a token from the auth page URL
4. Verifying successful authentication

Screenshots

The UI shows a collapsible section with clear instructions for users who need to manually enter their authentication token.

Fixes #7723

Important

Adds manual token authentication for Firebase Studio users, enabling token pasting for authentication without redirects, with UI and backend support.

Behavior:
- Adds manual token authentication for Firebase Studio users in CloudView.tsx.
- Users can paste tokens directly from the URL to authenticate without redirects.
UI:
- Adds expandable manual token input in CloudView.tsx.
- Updates translation strings in cloud.json for manual token UI.
Backend:
- Implements handleManualToken in WebAuthService.ts to process manual tokens.
- Adds CloudService.handleManualToken to route manual token authentication.
- Updates webviewMessageHandler.ts to handle rooCloudManualToken messages.
Misc:
- Adds new WebviewMessage type rooCloudManualToken in WebviewMessage.ts.

^{This description was created by}^{for c75188b. You can customize this summary. It will automatically update as commits are pushed.}

- Add manual token input UI to CloudView component with expandable section - Add new WebviewMessage type 'rooCloudManualToken' with token field - Implement handleManualToken method in WebAuthService to process manual tokens - Add CloudService.handleManualToken method to route manual token auth - Update webviewMessageHandler to handle manual token submission - Add translation strings for manual token UI elements This allows users in Firebase Studio and other IDEs that don't support automatic authentication redirects to manually paste the token from the authentication page. Fixes #7723

ellipsis-dev · 2025-09-06T01:32:23Z

webview-ui/src/components/cloud/CloudView.tsx


+	const handleManualTokenSubmit = () => {
+		if (!manualToken.trim()) {
+			setTokenError(t("cloud:manualTokenError") || "Please enter a valid token")


Avoid using inline fallback strings with t(). The translation keys already have defaults in the locale files. Remove the '|| "Please enter a valid token"' fallback to ensure all user‐facing text is sourced from the translation files.

Suggested change

setTokenError(t("cloud:manualTokenError") || "Please enter a valid token")

setTokenError(t("cloud:manualTokenError"))

^{This comment was generated because it violated a code review rule: irule_C0ez7Rji6ANcGkkX.}

ellipsis-dev · 2025-09-06T01:32:24Z

webview-ui/src/components/cloud/CloudView.tsx

+												setTokenError("")
+											}}
+											placeholder={t("cloud:manualTokenPlaceholder") || "Paste token or URL here"}
+											className="flex-1"


Remove inline fallback string from the placeholder prop in VSCodeTextField. The call t("cloud:manualTokenPlaceholder") already returns the correct translated string from the locale file.

Suggested change

placeholder={t("cloud:manualTokenPlaceholder") || "Paste token or URL here"}

placeholder={t("cloud:manualTokenPlaceholder")}

^{This comment was generated because it violated a code review rule: irule_C0ez7Rji6ANcGkkX.}

ellipsis-dev · 2025-09-06T01:32:24Z

webview-ui/src/components/cloud/CloudView.tsx

+											onClick={handleManualTokenSubmit}
+											disabled={!manualToken.trim()}>
+											{t("cloud:submitToken") || "Submit"}
+										</VSCodeButton>


Remove inline fallback string from the submit button text. Use solely the translation via t("cloud:submitToken") so that all user-facing text comes from the locale files.

Suggested change

{t("cloud:submitToken") || "Submit"}

{t("cloud:submitToken")}

^{This comment was generated because it violated a code review rule: irule_C0ez7Rji6ANcGkkX.}

ellipsis-dev · 2025-09-06T01:32:24Z

src/core/webview/webviewMessageHandler.ts

+						`Manual token authentication failed: ${error instanceof Error ? error.message : String(error)}`,
+					)
+					vscode.window.showErrorMessage(
+						t("common:errors.manual_token_auth_failed") ||


Avoid using an inline fallback string in the error message for manual token authentication failure. Instead, rely solely on the translation function (t) with correctly defined translation keys.

^{This comment was generated because it violated a code review rule: irule_C0ez7Rji6ANcGkkX.}

roomote

I reviewed my own code and found it acceptable. The bar was low.

roomote · 2025-09-06T01:35:07Z

packages/cloud/src/CloudService.ts

+		}
+		// For WebAuthService, we need to add a method to handle manual tokens
+		// Type guard to check if the auth service is WebAuthService
+		if (this.authService instanceof WebAuthService) {


The instanceof check here works, but have you considered adding handleManualToken to the AuthService interface instead? That way we could avoid runtime type checking and make this more maintainable. Just a thought - what if we need to support manual tokens in other auth service implementations later?

roomote · 2025-09-06T01:35:07Z

packages/cloud/src/WebAuthService.ts

+
+			// For manual token, we don't have organization context from the URL
+			// Set it to null (personal account) by default
+			credentials.organizationId = null


I notice we're hardcoding organizationId to null here. Would it make sense to allow users to specify their organization if they belong to one? Maybe we could parse it from the URL or add an optional field in the UI?

roomote · 2025-09-06T01:35:07Z

webview-ui/src/components/cloud/CloudView.tsx

+		// Send the manual token to the backend
+		vscode.postMessage({ type: "rooCloudManualToken", token })
+		// Clear the token field for security
+		setManualToken("")


Good that we're clearing the token after submission! Consider also clearing it if the user collapses the manual token section without submitting - just for extra security. Also, might be nice to add a loading state while the token is being processed.

roomote · 2025-09-06T01:35:07Z

src/core/webview/webviewMessageHandler.ts

+				try {
+					// Extract the actual token from the URL if a full URL is pasted
+					let token = message.token.trim()
+					const tokenMatch = token.match(/[?&]token=([^&]+)/)


The token extraction regex is duplicated here and in CloudView.tsx. Could we extract this to a shared utility function to ensure consistency?

roomote · 2025-09-06T01:39:37Z

The CI checks have identified that the new translation keys need to be added to all locale files. The failing checks are:

check-translations: Missing translations for the new manual token authentication UI strings in all non-English locales
integration-test: Also failing (may be related to the translation issue)

The new keys that need translation are:

manualTokenLink: "Having trouble? Enter token manually"
manualTokenDescription: "If you're using Firebase Studio or another IDE that doesn't support automatic authentication, you can paste the token from the authentication page here."
manualTokenPlaceholder: "Paste token or URL here"
manualTokenError: "Please enter a valid token"
submitToken: "Submit"

These would need to be added to all 17 non-English locale files in webview-ui/src/i18n/locales/*/cloud.json.

Since this is a straightforward feature addition that solves the Firebase Studio authentication issue, would it be acceptable to:

Add placeholder English text to all locales for now (to pass CI)
Or have the translation team handle the localization in a follow-up?

The core functionality is working and ready for review.

daniel-lxs · 2025-09-08T20:06:41Z

This solution seems incomplete I would rather have a member of the dev team address this one

roomote-agent added 2 commits September 6, 2025 01:27

fix: handle null userInfo in manual token auth response

c75188b

roomote bot requested review from mrubens, cte and jr as code owners September 6, 2025 01:30

github-project-automation bot added this to Roo Code Roadmap and Roo Code Roadmap Sep 6, 2025

github-project-automation bot moved this to New in Roo Code Roadmap Sep 6, 2025

github-project-automation bot moved this to Triage in Roo Code Roadmap Sep 6, 2025

dosubot bot added size:L This PR changes 100-499 lines, ignoring generated files. enhancement New feature or request labels Sep 6, 2025

roomote bot mentioned this pull request Sep 6, 2025

Adding alternate authentication for roo code cloud #7723

Closed

4 tasks

ellipsis-dev bot reviewed Sep 6, 2025

View reviewed changes

hannesrudolph added the Issue/PR - Triage New issue. Needs quick review to confirm validity and assign labels. label Sep 6, 2025

roomote bot commented Sep 6, 2025

View reviewed changes

daniel-lxs closed this Sep 8, 2025

github-project-automation bot moved this from Triage to Done in Roo Code Roadmap Sep 8, 2025

github-project-automation bot moved this from New to Done in Roo Code Roadmap Sep 8, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat: add manual token authentication for Firebase Studio support #7724

feat: add manual token authentication for Firebase Studio support #7724

roomote bot commented Sep 6, 2025 •

edited by ellipsis-dev bot

Loading

Uh oh!

ellipsis-dev bot Sep 6, 2025

Uh oh!

ellipsis-dev bot Sep 6, 2025

Uh oh!

ellipsis-dev bot Sep 6, 2025

Uh oh!

ellipsis-dev bot Sep 6, 2025

Uh oh!

roomote bot left a comment

Uh oh!

roomote bot Sep 6, 2025

Uh oh!

roomote bot Sep 6, 2025

Uh oh!

roomote bot Sep 6, 2025

Uh oh!

roomote bot Sep 6, 2025

Uh oh!

roomote bot commented Sep 6, 2025

Uh oh!

daniel-lxs commented Sep 8, 2025

Uh oh!

Uh oh!

	setTokenError(t("cloud:manualTokenError") \|\| "Please enter a valid token")
	setTokenError(t("cloud:manualTokenError"))

	placeholder={t("cloud:manualTokenPlaceholder") \|\| "Paste token or URL here"}
	placeholder={t("cloud:manualTokenPlaceholder")}

	{t("cloud:submitToken") \|\| "Submit"}
	{t("cloud:submitToken")}

feat: add manual token authentication for Firebase Studio support #7724

feat: add manual token authentication for Firebase Studio support #7724

Conversation

roomote bot commented Sep 6, 2025 • edited by ellipsis-dev bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Problem

Solution

Changes

Testing

Screenshots

Uh oh!

ellipsis-dev bot Sep 6, 2025

Choose a reason for hiding this comment

Uh oh!

ellipsis-dev bot Sep 6, 2025

Choose a reason for hiding this comment

Uh oh!

ellipsis-dev bot Sep 6, 2025

Choose a reason for hiding this comment

Uh oh!

ellipsis-dev bot Sep 6, 2025

Choose a reason for hiding this comment

Uh oh!

roomote bot left a comment

Choose a reason for hiding this comment

Uh oh!

roomote bot Sep 6, 2025

Choose a reason for hiding this comment

Uh oh!

roomote bot Sep 6, 2025

Choose a reason for hiding this comment

Uh oh!

roomote bot Sep 6, 2025

Choose a reason for hiding this comment

Uh oh!

roomote bot Sep 6, 2025

Choose a reason for hiding this comment

Uh oh!

roomote bot commented Sep 6, 2025

Uh oh!

daniel-lxs commented Sep 8, 2025

Uh oh!

Uh oh!

roomote bot commented Sep 6, 2025 •

edited by ellipsis-dev bot

Loading