Function login

cli/src/auth.rs:125–242

Start the device code login flow

()

/// Start the device code login flow
pub async fn login() -> Result<AuthTokens, Box<dyn std::error::Error>> {
    let client = reqwest::Client::new();

    // Step 1: Request device code
    eprintln!("Requesting device code...");

    let device_code_url = format!("https://{}/oauth/device/code", AUTH0_DOMAIN);
    let response = client
        .post(&device_code_url)
        .form(&[
            ("client_id", AUTH0_CLIENT_ID),
            ("scope", "openid profile email offline_access"),
            ("audience", AUTH0_AUDIENCE),
        ])
        .send()
        .await?;

    if !response.status().is_success() {
        let text = response.text().await?;
        return Err(format!("Failed to get device code: {}", text).into());
    }

    let device_code: DeviceCodeResponse = response.json().await?;

    // Step 2: Display login instructions to stderr
    eprintln!();
    eprintln!("To login, open this URL in your browser:");
    eprintln!();
    eprintln!("  {}", device_code.verification_uri_complete);
    eprintln!();
    eprintln!("Or go to {} and enter code: {}", device_code.verification_uri, device_code.user_code);
    eprintln!();
    eprint!("Waiting for login...");
    io::stderr().flush()?;

    // Step 3: Poll for token
    let token_url = format!("https://{}/oauth/token", AUTH0_DOMAIN);
    let poll_interval = Duration::from_secs(device_code.interval.max(5)); // At least 5 seconds
    let deadline = std::time::Instant::now() + Duration::from_secs(device_code.expires_in);

    loop {
        if std::time::Instant::now() > deadline {
            eprintln!();
            return Err("Login timed out. Please try again.".into());
        }

        tokio::time::sleep(poll_interval).await;
        eprint!(".");
        io::stderr().flush()?;

        let response = client
            .post(&token_url)
            .form(&[
                ("grant_type", "urn:ietf:params:oauth:grant-type:device_code"),
                ("device_code", &device_code.device_code),
                ("client_id", AUTH0_CLIENT_ID),
            ])
            .send()