Function auth_session

app/api/agentops/auth/views.py:357–401

Receives the auth payload from the callback, validates it, creates a session, and returns a response with a cookie referencing the session.

(request: Request)

# TODO annotate response type
@public_route
async def auth_session(request: Request) -> JSONResponse:
    """
    Receives the auth payload from the callback, validates it, creates a session,
    and returns a response with a cookie referencing the session.
    """
    print("auth_session: Processing request")

    # we just pass the hash params directly into the body of the request
    # so these are URL-encoded
    body = await request.body()
    print(f"auth_session: Raw body length: {len(body)}")

    params = urllib.parse.parse_qs(body.decode('utf-8'))
    print(f"auth_session: Parsed params keys: {list(params.keys())}")

    access_token = params.get('access_token', [None])[0]

    if not access_token:
        print("auth_session: ERROR - No access_token in request body")
        raise AuthException("Invalid parameters passed to callback URL.")

    print("auth_session: Found access_token, attempting to decode JWT")

    try:
        # Decode the JWT to see what user info we have
        user_data = _decode_supabase_jwt(access_token)
        print(f"auth_session: Decoded JWT for user {user_data.sub} with email {user_data.email}")

        # Check if this is an invite acceptance (look for invited_to_org in metadata)
        invited_to_org = None
        if user_data.user_metadata and 'invited_to_org' in user_data.user_metadata:
            invited_to_org = user_data.user_metadata.get('invited_to_org')
            print(f"auth_session: User is accepting invite to org {invited_to_org}")
    except Exception as e:
        print(f"auth_session: ERROR - Failed to decode JWT: {str(e)}")
        raise AuthException("Failed to decode access token")

    content = StatusResponse(message="User authenticated successfully.")
    response = JSONResponse(content=content.model_dump())

    print("auth_session: Creating session and setting cookie")
    result = _create_session_for_response(response, access_token)
    print("auth_session: Session created successfully, returning response")

    return result


# TODO annotate response type