[FEATURE]: oauth2proxy (but more like simple auth proxy) support

[herb]

Feature hasn't been suggested before.

• I have verified this feature I'm about to request hasn't been suggested before.

Describe the enhancement you want to request

i want to run opencode serve/web behind oauth2proxy for auth. that works out of the box for opencode web but if i want to connect a tui or desktop app to it there needs to be a way for the client to offer a auth/bearer token.

is this something you guys would be interested in supporting? i'm imagine a '--auth-token' parameter for both tui and desktop. attaching a plan i asked glm-5 to spin up as a strawman (and the caveat i have no real experience with the codebase).

oauth2_support.md

[github-actions]

This issue might be a duplicate of existing issues. Please check:

• [FEATURE]: Adding Authentication to opencode server api #5256: Also requests authentication for opencode server so that TUI/desktop clients can securely connect to a remote instance (proposes a --passkey flag, similar to your --auth-token idea)
• [FEATURE]: Ephemeral Server Authentication Zero/Low Trust State for LLM providers #17220: Requests ephemeral client-side auth forwarding for opencode serve in shared/multi-user environments

If your request is distinct from those, please clarify what's different so maintainers can evaluate it separately.

[herb]

not sure why i didn't see it before, but mostly a dup of #5256 so i closed it.

[herb]

actually reading it closer i suspect my request is different. #5256 is asking for something similar to basic auth on the 'backend'. whereas i want something on the 'client side' to support an auth proxy. @iamdavidhill since you were assigned, i'll let you decide if this is novel enough to re-open.