Function exchangeChatGptCodeForTokens

cli/src/utils/chatgpt-oauth.ts:244–295

(
  authCodeInput: string,
  codeVerifier?: string,
)

}

export async function exchangeChatGptCodeForTokens(
  authCodeInput: string,
  codeVerifier?: string,
): Promise<ChatGptOAuthCredentials> {
  const verifier = codeVerifier ?? pendingCodeVerifier
  if (!verifier) {
    throw new Error('No PKCE verifier found. Please run /connect:chatgpt again.')
  }

  const { code, state } = parseAuthCodeInput(authCodeInput)

  if (pendingState && state && pendingState !== state) {
    throw new Error('OAuth state mismatch. Please restart /connect:chatgpt.')
  }

  const response = await fetch(CHATGPT_OAUTH_TOKEN_URL, {
    method: 'POST',
    headers: {
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({
      grant_type: 'authorization_code',
      client_id: CHATGPT_OAUTH_CLIENT_ID,
      redirect_uri: CHATGPT_OAUTH_REDIRECT_URI,
      code,
      code_verifier: verifier,
    }),
  })

  if (!response.ok) {
    throw new Error(
      `Failed to exchange ChatGPT OAuth code (status ${response.status}). Please retry /connect:chatgpt.`,
    )
  }

  const data = await response.json()
  const tokenResponse = parseOAuthTokenResponse(data)

  const credentials: ChatGptOAuthCredentials = {
    accessToken: tokenResponse.accessToken,
    refreshToken: tokenResponse.refreshToken,
    expiresAt: Date.now() + tokenResponse.expiresInMs,
    connectedAt: Date.now(),
  }

  saveChatGptOAuthCredentials(credentials)
  resetChatGptOAuthRateLimit()
  pendingCodeVerifier = null
  pendingState = null

  return credentials
}

export function disconnectChatGptOAuth(): void {
  stopChatGptOAuthServer()