Function startCallbackServer

src/mcp/auth.ts:192–222

Start a one-shot loopback HTTP server to receive the OAuth redirect.

(
	port: number,
	onCode: (code: string) => void,
)

/** Start a one-shot loopback HTTP server to receive the OAuth redirect. */
function startCallbackServer(
	port: number,
	onCode: (code: string) => void,
): http.Server {
	const server = http.createServer((req, res) => {
		const url = new URL(req.url ?? "/", `http://localhost:${port}`)
		if (url.pathname !== "/callback") {
			res.writeHead(404, { "Content-Type": "text/html" })
			res.end(callbackPage("not-found"))
			return
		}
		const code = url.searchParams.get("code")
		const error = url.searchParams.get("error")
		if (code) {
			onCode(code)
			res.writeHead(200, { "Content-Type": "text/html" })
			res.end(callbackPage("success"))
		} else if (error) {
			const desc = url.searchParams.get("error_description") ?? error
			res.writeHead(400, { "Content-Type": "text/html" })
			res.end(callbackPage("error", desc))
		} else {
			res.writeHead(400, { "Content-Type": "text/html" })
			res.end(callbackPage("error", "Missing authorization code in the callback."))
		}
		// Close after responding so the port is freed immediately.
		server.close()
	})
	server.listen(port, "127.0.0.1")
	return server
}

/** Render the OAuth callback page. Styled to match matterai.so: dark
 *  background, cyan/teal accents, centered card, clean typography. */