Function startCallbackServer

cli/src/utils/chatgpt-oauth.ts:139–210

(codeVerifier: string)

}

function startCallbackServer(codeVerifier: string): Promise<ChatGptOAuthCredentials> {
  const redirectUrl = new URL(CHATGPT_OAUTH_REDIRECT_URI)
  const port = parseInt(redirectUrl.port, 10)
  const callbackPath = redirectUrl.pathname

  return new Promise<ChatGptOAuthCredentials>((resolve, reject) => {
    const timeout = setTimeout(() => {
      stopChatGptOAuthServer()
      reject(new Error('Timeout waiting for ChatGPT authorization'))
    }, CALLBACK_SERVER_TIMEOUT_MS)

    const server = http.createServer(async (req, res) => {
      const reqUrl = new URL(req.url ?? '/', `http://127.0.0.1:${port}`)

      if (reqUrl.pathname !== callbackPath) {
        res.writeHead(404, { 'Content-Type': 'text/plain' })
        res.end('Not found')
        return
      }

      const code = reqUrl.searchParams.get('code')
      if (!code) {
        res.writeHead(400, { 'Content-Type': 'text/html' })
        res.end(callbackPageHtml(false, 'No authorization code received.'))
        clearTimeout(timeout)
        stopChatGptOAuthServer()
        reject(new Error('No authorization code in callback'))
        return
      }

      const state = reqUrl.searchParams.get('state')
      if (pendingState && (!state || state !== pendingState)) {
        res.writeHead(400, { 'Content-Type': 'text/html' })
        res.end(callbackPageHtml(false, 'OAuth state mismatch. Please try again.'))
        clearTimeout(timeout)
        stopChatGptOAuthServer()
        reject(new Error('OAuth state mismatch in callback'))
        return
      }

      try {
        const fullCallbackUrl = `${CHATGPT_OAUTH_REDIRECT_URI}${reqUrl.search}`
        const credentials = await exchangeChatGptCodeForTokens(fullCallbackUrl, codeVerifier)

        res.writeHead(200, { 'Content-Type': 'text/html' })
        res.end(callbackPageHtml(true))

        clearTimeout(timeout)
        stopChatGptOAuthServer()
        resolve(credentials)
      } catch (err) {
        const message = err instanceof Error ? err.message : 'Token exchange failed'
        res.writeHead(500, { 'Content-Type': 'text/html' })
        res.end(callbackPageHtml(false, message))

        clearTimeout(timeout)
        stopChatGptOAuthServer()
        reject(err instanceof Error ? err : new Error(message))