OAuth device login for ChatGPT accounts

Let users bring their own ChatGPT to your app.

Server-owned login, encrypted sessions, and Vercel AI SDK streaming on the user's plan — no API key from you, no tokens in the browser.

Get started Read the docs

terminal

bun add @opencoredev/loginwithchatgpt-server \
  @opencoredev/loginwithchatgpt-react @opencoredev/loginwithchatgpt-ai

server.tsthe whole backend

const auth = createChatGPTHandler({
  secret: process.env.LWC_SECRET,
});

Bun.serve({
  routes: {
    "/api/chatgpt/*": (req) => auth.handler(req),
  },
});

One handler owns the whole flow

The device-code flow needs no redirect URL, so it works the same in serverless, containers, and local dev.

01
Browser starts login
The widget shows a consent step, then requests a device code.
POST /api/chatgpt/login
02
User authorizes on OpenAI
They enter a short code on auth.openai.com — no redirect URL, no localhost listener.
auth.openai.com/codex/device
03
Server stores the tokens
Polling advances one step per request; tokens are encrypted into your session store.
GET /api/chatgpt/status
04
AI SDK streams through you
streamText() hits your proxy, which injects credentials and streams back.
POST /api/chatgpt/responses