arka/librefang-registry
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(hands): migrate Reddit auth to client_credentials, document Twitter OAuth 1.0a

Browse Source 
Reddit:
- Remove REDDIT_USERNAME and REDDIT_PASSWORD requirements (deprecated
  password grant)
- Switch to grant_type=client_credentials (app-only auth)
- Update system_prompt and SKILL.md auth examples

Twitter:
- Add optional OAuth 1.0a credentials (API key/secret, access
  token/secret) for user-context operations
- Document Bearer Token vs OAuth 1.0a authentication modes in SKILL.md
- Note which endpoints require user-context auth
This commit is contained in:
Evan Hu committed 2026-03-22 20:28:16 +09:00
1 parent 8923c4e0c3
commit fb45e39dcb
4 files changed
+94 -43
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

hands/reddit/HAND.toml
+5 -40
View File
@@ -44,7 +44,7 @@ steps = [
"Select 'script' as the app type",
"Fill in name and redirect URI (http://localhost:8080)",
"Copy the client ID (under the app name) and secret",
"Set REDDIT_CLIENT_ID, REDDIT_CLIENT_SECRET, REDDIT_USERNAME, and REDDIT_PASSWORD as environment variables",
"Set REDDIT_CLIENT_ID and REDDIT_CLIENT_SECRET as environment variables",
"Restart LibreFang or reload config for the change to take effect",
]
@@ -70,42 +70,6 @@ steps = [
"Restart LibreFang or reload config for the change to take effect",
]
[[requires]]
key = "REDDIT_USERNAME"
label = "Reddit Username"
requirement_type = "api_key"
check_value = "REDDIT_USERNAME"
description = "Reddit account username. Required for OAuth2 password-grant authentication to post and comment."
[requires.install]
signup_url = "https://www.reddit.com/register"
docs_url = "https://www.reddit.com/dev/api/"
env_example = "REDDIT_USERNAME=your_reddit_username"
estimated_time = "1-2 min"
steps = [
"Use the Reddit account username you want the hand to act as",
"Set REDDIT_USERNAME as an environment variable",
"Restart LibreFang or reload config for the change to take effect",
]
[[requires]]
key = "REDDIT_PASSWORD"
label = "Reddit Password"
requirement_type = "api_key"
check_value = "REDDIT_PASSWORD"
description = "Reddit account password. Required for OAuth2 password-grant authentication to post and comment."
[requires.install]
signup_url = "https://www.reddit.com/register"
docs_url = "https://www.reddit.com/dev/api/"
env_example = "REDDIT_PASSWORD=your_reddit_password"
estimated_time = "1-2 min"
steps = [
"Use the password for the Reddit account configured in REDDIT_USERNAME",
"Set REDDIT_PASSWORD as an environment variable",
"Restart LibreFang or reload config for the change to take effect",
]
# ─── Configurable settings ───────────────────────────────────────────────────
[[settings]]
@@ -260,19 +224,20 @@ Detect the operating system:
python -c "import platform; print(platform.system())"
```
Authenticate with Reddit API using OAuth2:
Authenticate with Reddit API using OAuth2 client_credentials (app-only auth):
```
curl -s -X POST "https://www.reddit.com/api/v1/access_token" \
-u "$REDDIT_CLIENT_ID:$REDDIT_CLIENT_SECRET" \
-d "grant_type=password&username=$REDDIT_USERNAME&password=$REDDIT_PASSWORD" \
-d "grant_type=client_credentials" \
-A "LibreFang Reddit Hand/1.0" \
-o reddit_auth.json
```
Extract the access_token from the response for subsequent API calls.
Note: This is app-only authentication — most read endpoints work, but posting and commenting require the app's identity. No user-level context is available.
Recover state:
1. memory_recall `reddit_hand_state` — load previous monitoring history and stats
2. Read **User Configuration** for subreddits, monitor_mode, content_style, approval_mode, etc.
2. Read **Hand Settings** for subreddits, monitor_mode, content_style, approval_mode, etc.
3. file_read `reddit_queue.json` if it exists — pending posts/replies
4. knowledge_query for previously tracked threads and engagement data
hands/reddit/SKILL.md
+5 -3
View File
@@ -13,15 +13,17 @@ runtime: prompt_only
Reddit API requires OAuth2 authentication for all endpoints.
**Step 1: Get access token**:
**Step 1: Get access token (app-only / client_credentials)**:
```bash
curl -s -X POST "https://www.reddit.com/api/v1/access_token" \
-u "$REDDIT_CLIENT_ID:$REDDIT_CLIENT_SECRET" \
-d "grant_type=password&username=$REDDIT_USERNAME&password=$REDDIT_PASSWORD" \
-d "grant_type=client_credentials" \
-A "LibreFang Reddit Hand/1.0"
```
Response: `{"access_token": "...", "token_type": "bearer", "expires_in": 86400, "scope": "*"}`
> **Note:** `client_credentials` provides app-only access. Most read endpoints (listing posts, fetching comments, searching) work normally. Posting and commenting use the app's identity. For full user-level actions (e.g., voting, managing subscriptions), the more complex OAuth2 authorization code flow is required.
**All subsequent requests** must include:
```
Authorization: Bearer $ACCESS_TOKEN
@@ -101,7 +103,7 @@ curl -s -H "Authorization: Bearer $ACCESS_TOKEN" \
| Type | Limit | Window |
|------|-------|--------|
| OAuth authenticated | 10 requests | 1 minute |
| With user-level auth | 30 requests | 1 minute |
| With app-only auth | 30 requests | 1 minute |
| Posting | ~1 post | 10 minutes (varies by karma) |
| Commenting | ~1 comment | varies by karma |