Sparshr04/GitHub copilot auth UI by Sparshr04 · Pull Request #201 · Extralit/extralit

Sparshr04 · 2026-03-18T09:53:49Z

[Feature] Implement GitHub Copilot OAuth Device Flow UI

Description

This PR adds the frontend UI and data layer to handle the 3-step GitHub Copilot OAuth Device Flow. This connects the client to the /api/v1/auth/github endpoints.

Key Additions:

UI: Created the CopilotConnect.vue component and added it to the UserSettingsContent.vue page to handle the Disconnected, Pending (Polling), and Connected states.
Repository Layer: Added GitHubAuthRepository using the standard NuxtAxiosInstance to ensure Extralit JWTs are correctly passed for user isolation.
Domain Layer: Created GitHubAuthUseCase to orchestrate the login initiation, status checking, and the background polling loop (with proper onBeforeUnmount cleanup to prevent memory leaks).
Storage Layer: Added GitHubAuthStorage using the existing Pinia useStoreFor factory pattern to handle the reactive auth state.

Related Tickets & Documents

Depends on: #200

Steps to QA

Ensure both the extralit-frontend and extralit-server dev servers are running.
Navigate to your profile -> My settings.
Scroll down to the new GitHub Copilot section and click Connect Copilot.
Copy the generated User Code and click the GitHub verification link.
Enter the code on GitHub and click Authorize.
Return to the Extralit settings page and validate that the UI automatically transitions to the green "GitHub Copilot Connected" badge.

Added/updated tests?

Yes
No, and this is why: Manual QA steps provided; UI components and use-case logic rely on active backend integration and the live GitHub OAuth flow.
I need help with writing tests

Added/updated documentations?

Yes
No, and this is why: This is a self-contained UI feature embedded in the existing user settings page.
I need help with writing docs

Checklist

I have added relevant notes to the CHANGELOG.md file (See https://keepachangelog.com/)

Co-authored-by: JonnyTran <4750391+JonnyTran@users.noreply.github.com>

- Update `BaseSimpleTable` adapter to pass the full column configuration (including editor params) instead of just name/type. - Update `RenderTable` logic to respect custom column settings (like `editor: "list"`) by prioritizing schema config over defaults. - Add watcher to `columnsConfig` in `RenderTable` to ensure dropdown options update reactively when new files are uploaded.

- Add missing `$emit('cell-edited')` in `RenderTable`'s tabulator handler. - Ensures parent components are notified of changes to trigger state updates like the unmapped files counter.

…option

…irectly injecting the token

Adds the CopilotConnect component to user settings, use-cases, and Pinia storage to handle the 3-step OAuth device flow.

Copilot

Pull request overview

Implements GitHub Copilot OAuth Device Flow connectivity and introduces supporting backend endpoints plus a new LiteLLM-based /chat API, alongside some packaging/runtime and import-flow updates.

Changes:

Added backend GitHub device-flow auth endpoints and a new streaming chat endpoint using LiteLLM (with optional RAG retrieval).
Added frontend Copilot “Connect” UI with repository/use-case/storage wiring in the Nuxt v1 architecture.
Updated Python packaging constraints/dependencies and introduced PDF-only import metadata table state + tests (UI wiring appears incomplete).

Reviewed changes

Copilot reviewed 20 out of 21 changed files in this pull request and generated 19 comments.

Show a summary per file

File	Description
extralit/pyproject.toml	Changes SDK Python requirement and dependency versions.
extralit-server/pyproject.toml	Bumps server Python requirement, adds LiteLLM + local extralit dependency.
extralit-server/src/extralit_server/utils/litellm_context.py	Adds per-user LiteLLM config isolation via `XDG_CONFIG_HOME`.
extralit-server/src/extralit_server/utils/auth_helpers.py	Implements GitHub device flow helper + token persistence.
extralit-server/src/extralit_server/jobs/preload.py	Enables OCR job preloading.
extralit-server/src/extralit_server/api/routes.py	Registers new `/auth/github/*` and `/chat` routers.
extralit-server/src/extralit_server/api/handlers/v1/github_auth.py	Adds GitHub auth API endpoints for device flow.
extralit-server/src/extralit_server/api/handlers/v1/chat.py	Adds streaming chat endpoint using LiteLLM + optional RAG.
extralit-frontend/v1/infrastructure/storage/GitHubAuthStorage.ts	Adds Pinia-backed reactive state for GitHub auth.
extralit-frontend/v1/infrastructure/repositories/index.ts	Exports the new GitHub auth repository.
extralit-frontend/v1/infrastructure/repositories/GitHubAuthRepository.ts	Adds API client for GitHub auth endpoints.
extralit-frontend/v1/domain/usecases/github-auth-use-case.ts	Adds polling orchestration and store updates for the device flow.
extralit-frontend/v1/di/di.ts	Registers new repository/use-case/storage in DI container.
extralit-frontend/components/features/user-settings/UserSettingsContent.vue	Adds GitHub Copilot section to user settings.
extralit-frontend/components/features/user-settings/useCopilotConnectViewModel.ts	View model for Copilot connect UI.
extralit-frontend/components/features/user-settings/CopilotConnect.vue	UI component for disconnected/pending/connected states.
extralit-frontend/components/features/import/file-upload/useImportFileUploadViewModel.ts	Adds state/logic for a PDF-only editable metadata table (UI not wired in template).
extralit-frontend/components/features/import/file-upload/useImportFileUploadViewModel.spec.ts	Adds unit tests for new import view-model logic.
extralit-frontend/components/features/import/file-upload/ImportFileUpload.vue	Imports/registers BaseSimpleTable but doesn’t render it.
copilot_changes.txt	Contains a pasted patch/diff dump.

Copilot · 2026-03-21T06:12:23Z

extralit/pyproject.toml

+# requires-python = ">=3.9.2, <3.14"
+requires-python = ">=3.11,<3.14"
 readme = "README.md"
 license = { text = "Apache 2.0" }


requires-python was raised to >=3.11, but repo docs indicate the extralit Python SDK supports Python 3.9.2+; this is a breaking packaging change for existing users/environments. Either keep the lower bound (or justify the bump) and ensure CI/docs/tooling are updated consistently.

Suggested change

# requires-python = ">=3.9.2, <3.14"

requires-python = ">=3.11,<3.14"

readme = "README.md"

license = { text = "Apache 2.0" }

requires-python = ">=3.9.2, <3.14"

readme = "README.md"

license = { text = "Apache 2.0" }

license = { text = "Apache 2.0" }

Copilot · 2026-03-21T06:12:23Z

extralit-server/pyproject.toml

+# requires-python = ">=3.11"
+requires-python = ">=3.11,<3.14"
 license = { text = "Apache-2.0" }


The server now requires Python >=3.11, but the Ruff config still targets py310 (and comments suggest older support). Please align the declared Python requirement, Ruff target-version, and any CI/runtime expectations to avoid incorrect linting/unsupported syntax usage.

Copilot · 2026-03-21T06:12:23Z

extralit-server/pyproject.toml

    "pdf2image>=1.17.0",
    "opencv-python-headless>=4.11.0.86",
+    # Local extralit package for OCR jobs
+    "extralit @ file:///${PROJECT_ROOT}/../extralit",


extralit @ file:///${PROJECT_ROOT}/../extralit is not a standard PEP 508 direct URL (env var interpolation is not generally supported by pip). This is likely to fail in non-dev installs/CI. Consider moving this to an optional/dev dependency, using a relative path supported by your package manager, or publishing/depending on a versioned extralit package instead.

Suggested change

"extralit @ file:///${PROJECT_ROOT}/../extralit",

"extralit @ ../extralit",

Copilot · 2026-03-21T06:12:24Z

extralit-server/src/extralit_server/utils/litellm_context.py

+        # Save original value
+        self.original_xdg_config_home = os.environ.get("XDG_CONFIG_HOME")
+
+        # Set to user-specific directory
+        os.environ["XDG_CONFIG_HOME"] = self.user_config_dir
+
+        # Ensure directory exists
+        Path(self.user_config_dir).mkdir(parents=True, exist_ok=True)
+


LiteLLMContext mutates the process-global os.environ["XDG_CONFIG_HOME"]. Under concurrent requests (multiple users), contexts can overlap and leak configuration across requests. Consider avoiding env mutation (preferred), or guard with a global async lock / per-request isolation mechanism that is concurrency-safe.

Copilot · 2026-03-21T06:12:24Z

extralit-server/src/extralit_server/utils/auth_helpers.py

+    def _get_config_dir(self) -> Path:
+        """Get the user-specific config directory for token storage."""
+        config_path = Path(settings.home_path) / "data" / "users" / self.username / "config"
+        config_path.mkdir(parents=True, exist_ok=True)
+        return config_path


username is used directly as a path segment when building the config directory. Since username validation only enforces non-empty length, a crafted username containing path separators could escape the intended directory (path traversal). Please sanitize/normalize (e.g., restrict allowed chars) or use a safe identifier like user.id for filesystem paths.

Copilot · 2026-03-21T06:12:26Z

extralit-frontend/components/features/import/file-upload/useImportFileUploadViewModel.spec.ts

@@ -0,0 +1,201 @@
+import { ref } from "@nuxtjs/composition-api";


Unused import: ref is imported but never referenced. This can fail lint/build in stricter configs and adds noise to the test file.

Suggested change

import { ref } from "@nuxtjs/composition-api";

Copilot · 2026-03-21T06:12:26Z

copilot_changes.txt

+diff --git a/extralit-frontend/components/base/base-render-table/RenderTable.vue b/extralit-frontend/components/base/base-render-table/RenderTable.vue
+index ff6874489..ab73e5afb 100644
+--- a/extralit-frontend/components/base/base-render-table/RenderTable.vue
+++ b/extralit-frontend/components/base/base-render-table/RenderTable.vue
+@@ -150,6 +150,7 @@ export default {
+     //     }
+     //   },
+     // },
+
+     validation: {
+       handler(newValidation, oldValidation) {
+         if (this.isLoaded) {
+@@ -196,7 +197,7 @@ export default {
+       var configs = this.tableJSON.schema.fields.map((column: DataFrameField) => {
+         const commonConfig = this.generateColumnConfig(column.name);
+         const editableConfig = this.generateColumnEditableConfig(column.name);
+-        return { ...commonConfig, ...editableConfig };
+        return { ...commonConfig, ...editableConfig, ...column };
+       });
+
+       if (!this.editable) {
+@@ -913,6 +914,7 @@ export default {
+
+         this.tabulator.on("cellEdited", (cell: CellComponent) => {
+           this.updateTableJsonData();
+          this.$emit("cell-edited", cell);
+           // const rowPos: number | boolean = cell.getRow().getPosition();
+           // if (typeof rowPos != 'number' || rowPos < 0 || rowPos > this.tableJSON.data.length) return;
+           // this.$set(this.tableJSON.data[rowPos-1], cell.getColumn().getField(), cell.getValue());
+diff --git a/extralit-frontend/components/base/base-simple-table/BaseSimpleTable.vue b/extralit-frontend/components/base/base-simple-table/BaseSimpleTable.vue
+index 15a62bbc4..3a7e5435a 100644
+--- a/extralit-frontend/components/base/base-simple-table/BaseSimpleTable.vue
+++ b/extralit-frontend/components/base/base-simple-table/BaseSimpleTable.vue
+@@ -6,6 +6,7 @@
+       :editable="editable"
+       :hasValidValues="hasValidValues"
+       :questions="questions"
+      :validation="validation || validators"
+       @table-built="$emit('table-built')"
+       @row-click="(e, row) => $emit('row-click', e, row)"
+       @cell-edited="(cell) => $emit('cell-edited', cell)"
+@@ -71,9 +72,11 @@ export default {
+   computed: {
+     // Convert simple data/columns to TableData format for RenderTable
+     computedTableJSON(): TableData {
+      // FIX 1: Use "...col" to preserve editor config (dropdowns), validators, and freezing
+       const fields = this.columns.map((col: any) => ({
+         name: col.field,
+         type: col.type || "string",
+        ...col // <--- THIS IS THE MAGIC FIX
+       }));
+
+       const schema = new DataFrameSchema(
+@@ -89,7 +92,14 @@ export default {
+         null
+       );
+
+-      if (this.validation) {
+      // FIX 2: Handle both 'validation' and 'validators' props
+      // ImportFileUpload passes :validators, so we must prioritize that.


This file appears to be a pasted diff/patch dump (diff --git ...) rather than application code or documentation used by the project. If it’s only for reference, it shouldn’t be committed to the repo; please remove it or convert it into proper applied changes / documentation.

Suggested change

diff --git a/extralit-frontend/components/base/base-render-table/RenderTable.vue b/extralit-frontend/components/base/base-render-table/RenderTable.vue

index ff6874489..ab73e5afb 100644

--- a/extralit-frontend/components/base/base-render-table/RenderTable.vue

+++ b/extralit-frontend/components/base/base-render-table/RenderTable.vue

@@ -150,6 +150,7 @@ export default {

// }

// },

// },

+

validation: {

handler(newValidation, oldValidation) {

if (this.isLoaded) {

@@ -196,7 +197,7 @@ export default {

var configs = this.tableJSON.schema.fields.map((column: DataFrameField) => {

const commonConfig = this.generateColumnConfig(column.name);

const editableConfig = this.generateColumnEditableConfig(column.name);

- return { ...commonConfig, ...editableConfig };

+ return { ...commonConfig, ...editableConfig, ...column };

});

if (!this.editable) {

@@ -913,6 +914,7 @@ export default {

this.tabulator.on("cellEdited", (cell: CellComponent) => {

this.updateTableJsonData();

+ this.$emit("cell-edited", cell);

// const rowPos: number | boolean = cell.getRow().getPosition();

// if (typeof rowPos != 'number' || rowPos < 0 || rowPos > this.tableJSON.data.length) return;

// this.$set(this.tableJSON.data[rowPos-1], cell.getColumn().getField(), cell.getValue());

diff --git a/extralit-frontend/components/base/base-simple-table/BaseSimpleTable.vue b/extralit-frontend/components/base/base-simple-table/BaseSimpleTable.vue

index 15a62bbc4..3a7e5435a 100644

--- a/extralit-frontend/components/base/base-simple-table/BaseSimpleTable.vue

+++ b/extralit-frontend/components/base/base-simple-table/BaseSimpleTable.vue

@@ -6,6 +6,7 @@

:editable="editable"

:hasValidValues="hasValidValues"

:questions="questions"

+ :validation="validation || validators"

@table-built="$emit('table-built')"

@row-click="(e, row) => $emit('row-click', e, row)"

@cell-edited="(cell) => $emit('cell-edited', cell)"

@@ -71,9 +72,11 @@ export default {

computed: {

// Convert simple data/columns to TableData format for RenderTable

computedTableJSON(): TableData {

+ // FIX 1: Use "...col" to preserve editor config (dropdowns), validators, and freezing

const fields = this.columns.map((col: any) => ({

name: col.field,

type: col.type || "string",

+ ...col // <--- THIS IS THE MAGIC FIX

}));

const schema = new DataFrameSchema(

@@ -89,7 +92,14 @@ export default {

null

);

- if (this.validation) {

+ // FIX 2: Handle both 'validation' and 'validators' props

+ // ImportFileUpload passes :validators, so we must prioritize that.

# This file previously contained a temporary git diff/patch dump.

# The changes have been or should be applied to the actual source files,

# so the diff content has been removed to avoid keeping raw patches in the repo.

Copilot · 2026-03-21T06:12:26Z

extralit-server/src/extralit_server/api/routes.py

 from extralit_server.api.handlers.v1 import authentication as authentication_v1
+from extralit_server.api.handlers.v1 import (
+    chat as chat_v1,
+)


PR description frames this as a frontend-only OAuth Device Flow UI/data-layer change, but this diff also wires new backend routers (/auth/github/*, /chat) into the server API. Please either update the PR description/scope (and any linked tickets) to reflect backend + dependency/runtime changes, or split backend changes into a separate PR for easier review/release management.

Copilot · 2026-03-21T06:12:26Z

extralit-frontend/components/features/user-settings/UserSettingsContent.vue

      <UserTokenComponent :userToken="user.apiKey" />
    </div>
+    <div class="form-group">
+      <h2 class="--heading5 --medium description__title">GitHub Copilot</h2>


This new section title is hardcoded (GitHub Copilot) while the rest of the settings page uses $t(...) for i18n. Please add the corresponding translation key and use $t here for consistency with the existing localization approach.

Suggested change

<h2 class="--heading5 --medium description__title">GitHub Copilot</h2>

<h2 class="--heading5 --medium description__title" v-text="$t('userSettings.copilot')" />

Copilot · 2026-03-21T06:12:27Z

extralit-server/src/extralit_server/api/handlers/v1/github_auth.py

+    github_auth = GitHubDeviceFlowAuth(username=current_user.username)
+
+    try:
+        # Poll with a short timeout (single attempt)
+        token_data = await github_auth.poll_for_token(
+            device_code=request.device_code,
+            interval=5,
+            timeout=10,  # Just one quick check
+        )
+
+        # Save the token
+        github_auth.save_token(token_data)
+
+        _LOGGER.info(f"Successfully authorized and saved token for {current_user.username}")
+
+        return PollTokenResponse(
+            status="authorized",
+            message="Successfully authenticated with GitHub",
+        )
+    except TimeoutError:
+        # User hasn't authorized yet
+        return PollTokenResponse(
+            status="pending",
+            message="Authorization pending",
+        )
+    except ValueError as e:
+        _LOGGER.error(f"Token polling error for {current_user.username}: {e}")
+        return PollTokenResponse(
+            status="error",
+            message=str(e),
+        )


poll_github_token only catches TimeoutError and ValueError, but poll_for_token() can raise httpx.HTTPError (network/API failures) or JSON parsing exceptions. Those will currently surface as 500s. Consider catching httpx.HTTPError and returning an appropriate HTTPException/structured status="error" response.

Copilot AI and others added 13 commits December 7, 2025 23:21

Initial plan

523e12f

Add editable table with PDF file matching for PDF-only uploads

9aceae4

Co-authored-by: JonnyTran <4750391+JonnyTran@users.noreply.github.com>

Add tests for editable table functionality

ae0b342

Co-authored-by: JonnyTran <4750391+JonnyTran@users.noreply.github.com>

fix(table): emit cell-edited event for parent state synchronization

72edcec

- Add missing `$emit('cell-edited')` in `RenderTable`'s tabulator handler. - Ensures parent components are notified of changes to trigger state updates like the unmapped files counter.

fix: Exclusive Multiselect Property for List Dropdown

c1c1c06

fix: Infinite loop condidion in RenderTable watcher and Freeze Table …

a7b9526

…option

feat: add Copilot-backed chat endpoint using LiteLLM (initial)

1449f53

fix: fastAPI ingestion error

28d384d

refactor: robust async race condition mitigation version of code by d…

4cdeedf

…irectly injecting the token

feat(ui): implement GitHub Copilot device flow authentication UI

f96f9c2

Adds the CopilotConnect component to user settings, use-cases, and Pinia storage to handle the 3-step OAuth device flow.

chore(backend): update dependencies and configure worker preload

f89e931

chore: resolve merge conflicts with develop

315bbf9

Sparshr04 requested review from a team as code owners March 18, 2026 09:53

Sparshr04 mentioned this pull request Mar 18, 2026

Sparshr04/litellm copilot integration #200

Open

5 tasks

JonnyTran requested a review from Copilot March 21, 2026 06:04

Copilot started reviewing on behalf of JonnyTran March 21, 2026 06:05 View session

Copilot AI reviewed Mar 21, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Sparshr04/GitHub copilot auth UI#201

Sparshr04/GitHub copilot auth UI#201
Sparshr04 wants to merge 13 commits intodevelopfrom
sparshr04/github-copilot-auth-ui

Sparshr04 commented Mar 18, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Mar 21, 2026

Uh oh!

Copilot AI Mar 21, 2026

Uh oh!

Copilot AI Mar 21, 2026

Uh oh!

Copilot AI Mar 21, 2026

Uh oh!

Copilot AI Mar 21, 2026

Uh oh!

Copilot AI Mar 21, 2026

Uh oh!

Copilot AI Mar 21, 2026

Uh oh!

Copilot AI Mar 21, 2026

Uh oh!

Copilot AI Mar 21, 2026

Uh oh!

Copilot AI Mar 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

	"extralit @ file:///${PROJECT_ROOT}/../extralit",
	"extralit @ ../extralit",

		@@ -0,0 +1,201 @@
		import { ref } from "@nuxtjs/composition-api";

	<h2 class="--heading5 --medium description__title">GitHub Copilot</h2>
	<h2 class="--heading5 --medium description__title" v-text="$t('userSettings.copilot')" />

Uh oh!

Conversation

Sparshr04 commented Mar 18, 2026

[Feature] Implement GitHub Copilot OAuth Device Flow UI

Description

Related Tickets & Documents

Steps to QA

Added/updated tests?

Added/updated documentations?

Checklist

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Mar 21, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 21, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 21, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 21, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 21, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 21, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 21, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 21, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 21, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Mar 21, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants