MrHuangJser 7386a70724 feat(cursor): auto-identify accounts from JWT sub for multi-account support ...

Previously Cursor required a manual ?label=xxx parameter to distinguish
accounts (unlike Codex which auto-generates filenames from JWT claims).

Cursor JWTs contain a "sub" claim (e.g. "auth0|user_XXXX") that uniquely
identifies each account. Now we:

- Add ParseJWTSub() + SubToShortHash() to extract and hash the sub claim
- Refactor GetTokenExpiry() to share the new decodeJWTPayload() helper
- Update CredentialFileName(label, subHash) to auto-generate filenames
  from the sub hash when no explicit label is provided
  (e.g. "cursor.8f202e67.json" instead of always "cursor.json")
- Add DisplayLabel() for human-readable account identification
- Store "sub" in metadata for observability
- Update both management API handler and SDK authenticator

Same account always produces the same filename (deterministic), different
accounts get different files. Explicit ?label= still takes priority.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-27 17:40:02 +08:00

..

proto

feat(cursor): implement StatusError for conductor cooldown integration

2026-03-27 11:42:22 +08:00

filename.go

feat(cursor): auto-identify accounts from JWT sub for multi-account support

2026-03-27 17:40:02 +08:00

oauth.go

feat(cursor): auto-identify accounts from JWT sub for multi-account support

2026-03-27 17:40:02 +08:00