Function runInteractiveLogin

cmd/login.go:323–410

()

}

func runInteractiveLogin() error {
	state, err := generateState()
	if err != nil {
		return fmt.Errorf("failed to generate state: %w", err)
	}

	ctx, cancel := context.WithCancel(context.Background())
	defer cancel()

	port, authChan, errChan, cleanup, err := startCallbackServerWithContext(ctx)
	if err != nil {
		return fmt.Errorf("failed to start callback server: %w", err)
	}
	defer cleanup()

	returnURI := fmt.Sprintf("%s:%d/callback", callbackURL, port)
	authURLWithParams := buildAuthURL(state, returnURI)

	model := tui.NewLoginModel(authURLWithParams)
	p := tea.NewProgram(model, tea.WithAltScreen())

	go func() {
		select {
		case authResp := <-authChan:
			tui.SendLoginSuccess(p, authResp.Token)
		case err := <-errChan:
			tui.SendLoginError(p, err)
		case <-ctx.Done():
			tui.SendLoginCancel(p)
		case <-time.After(5 * time.Minute):
			tui.SendLoginError(p, fmt.Errorf("authentication timeout - if you're using SSH, copy the token from your browser and press 'T' to enter it manually"))
		}
	}()

	if err := openBrowser(authURLWithParams); err != nil {
		fmt.Printf("Failed to open browser automatically: %v\n", err)
	}

	finalModel, err := p.Run()
	if err != nil {
		if fm, ok := finalModel.(tui.LoginModel); ok {
			model = fm
		}
		if model.State() == tui.LoginStateCancelled {
			PrintWarningSimple("User cancelled authentication")
			return nil
		}
		return fmt.Errorf("TUI error: %w", err)
	}

	// Update model from the returned final state. The original model variable
	// is a value copy that bubbletea never mutates — the real final state is
	// only available from the p.Run() return value.
	if fm, ok := finalModel.(tui.LoginModel); ok {
		model = fm
	}

	if model.State() == tui.LoginStateSuccess {