Function run_oidc_callback_server

crates/openshell-cli/src/oidc_auth.rs:348–377

Run the ephemeral callback server for the OIDC redirect. Listens for `GET /callback?code=...&state=...`.

(
    listener: TcpListener,
    tx: oneshot::Sender<String>,
    expected_state: String,
)

///
/// Listens for `GET /callback?code=...&state=...`.
async fn run_oidc_callback_server(
    listener: TcpListener,
    tx: oneshot::Sender<String>,
    expected_state: String,
) {
    let state = Arc::new(CallbackState {
        expected_state,
        tx: Mutex::new(Some(tx)),
    });

    loop {
        let Ok((stream, _)) = listener.accept().await else {
            return;
        };
        let state = Arc::clone(&state);
        tokio::spawn(async move {
            let service = service_fn(move |req| {
                let state = Arc::clone(&state);
                async move { Ok::<_, Infallible>(handle_oidc_callback(req, state)) }
            });

            if let Err(error) = Builder::new(TokioExecutor::new())
                .serve_connection(TokioIo::new(stream), service)
                .await
            {
                debug!(error = %error, "OIDC callback server connection failed");
            }
        });
    }
}

fn handle_oidc_callback(
    req: hyper::Request<hyper::body::Incoming>,