Function auth_code

app/api/agentops/auth/views.py:325–352

Handles the OAuth callback by exchanging the authorization code for a session. This is the endpoint that the OAuth provider redirects to after the user has authenticated. It expects a 'code' parameter in the query string, which is the authorization code received from the OAuth provi

(request: Request, code: str)

@public_route
async def auth_code(request: Request, code: str) -> RedirectResponse:
    """
    Handles the OAuth callback by exchanging the authorization code for a session.
    This is the endpoint that the OAuth provider redirects to after the user has authenticated.
    It expects a 'code' parameter in the query string, which is the authorization code
    received from the OAuth provider.
    """
    supabase_client = get_supabase()

    try:
        auth_response = supabase_client.auth.exchange_code_for_session({'auth_code': code})
    except gotrue.errors.AuthApiError as e:
        raise AuthException.from_gotrue_autherror(e)

    if hasattr(auth_response, 'error'):
        raise AuthException("Failed to exchange code for session.")

    access_token = auth_response.session.access_token

    # TODO this often redirects back to the signin page, just send all users to the dashboard
    # redirect_to = request.query_params.get('redirect_to')
    # if redirect_to and redirect_to.startswith('/'):
    #     response = RedirectResponse(url=f"{APP_URL}{redirect_to}")
    # else:
    #     response = RedirectResponse(url=DASHBOARD_URL)

    response = RedirectResponse(url=DASHBOARD_URL)
    return _create_session_for_response(response, access_token)


# TODO annotate response type