Method authenticate

src/main/lib/oauth.ts:681–762

()

  // Start the OAuth flow
  async authenticate(): Promise<{ tokens: OAuthTokens; clientId: string }> {
    this.callbacks.onStatus('Fetching OAuth server configuration...');

    // Get server metadata
    let metadata;
    try {
      metadata = await this.getServerMetadata();
      this.callbacks.onStatus(`Found OAuth endpoints at ${this.config.mcpBaseUrl}`);
    } catch (error) {
      const msg = error instanceof Error ? error.message : 'Unknown error';
      this.callbacks.onStatus(`Failed to get OAuth metadata: ${msg}`);
      throw error;
    }

    // Register client if endpoint available
    let clientId: string;
    if (metadata.registration_endpoint) {
      // Try primary client name first, fall back to alternative if rejected
      this.callbacks.onStatus(`Registering client as '${CLIENT_NAME}'...`);
      try {
        const client = await this.registerClient(metadata.registration_endpoint, CLIENT_NAME);
        clientId = client.client_id;
        this.callbacks.onStatus(`Registered as client: ${clientId}`);
      } catch (error) {
        // Try fallback client name (some servers have allowlists)
        this.callbacks.onStatus(`Registration as '${CLIENT_NAME}' failed, trying '${FALLBACK_CLIENT_NAME}'...`);
        try {
          const client = await this.registerClient(metadata.registration_endpoint, FALLBACK_CLIENT_NAME);
          clientId = client.client_id;
          this.callbacks.onStatus(`Registered as client: ${clientId}`);
        } catch (fallbackError) {
          const msg = fallbackError instanceof Error ? fallbackError.message : 'Unknown error';
          this.callbacks.onStatus(`Client registration failed: ${msg}`);
          throw fallbackError;
        }
      }
    } else {
      // Use a default client ID for public clients
      clientId = 'craft-agent';
      this.callbacks.onStatus(`Using default client ID: ${clientId}`);
    }

    // Generate PKCE and state
    const pkce = generatePKCE();
    const state = generateState();
    const redirectUri = `http://localhost:${CALLBACK_PORT}${CALLBACK_PATH}`;
    this.callbacks.onStatus('Generated PKCE challenge and state');

    // Build authorization URL
    const authUrl = new URL(metadata.authorization_endpoint);
    authUrl.searchParams.set('response_type', 'code');
    authUrl.searchParams.set('client_id', clientId);
    authUrl.searchParams.set('redirect_uri', redirectUri);
    authUrl.searchParams.set('state', state);
    authUrl.searchParams.set('code_challenge', pkce.challenge);
    authUrl.searchParams.set('code_challenge_method', 'S256');

    // Start local server to receive callback