Function signIn

e2e/targets/cloud.ts:32–58

(email: string)

/** The real product login, headless: login → hosted AuthKit → callback. */
const signIn = async (email: string): Promise<string> => {
  const login = await fetch(new URL("/api/auth/login", CLOUD_BASE_URL), { redirect: "manual" });
  const stateCookie = cookiePair(login, "wos-login-state");
  const location = login.headers.get("location");
  if (!stateCookie || !location) {
    throw new Error(`cloud signIn: login did not redirect to AuthKit (${login.status})`);
  }
  const authorizeUrl = new URL(location);
  if (!authorizeUrl.searchParams.get("state")) {
    throw new Error(`cloud signIn: login did not redirect to AuthKit (${login.status})`);
  }
  // The emulator's hosted login signs in headlessly via login_hint (creating
  // the user if new) and redirects back with a code.
  authorizeUrl.searchParams.set("login_hint", email);
  const consent = await fetch(authorizeUrl, { redirect: "manual" });
  const callbackUrl = consent.headers.get("location");
  if (consent.status !== 302 || !callbackUrl) {
    throw new Error(`cloud signIn: AuthKit emulator did not redirect (${consent.status})`);
  }
  const callback = await fetch(callbackUrl, {
    redirect: "manual",
    headers: { cookie: stateCookie },
  });
  const session = cookiePair(callback, "wos-session");
  if (!session) throw new Error(`cloud signIn: callback set no session (${callback.status})`);
  return session; // "wos-session=<sealed>"
};

export const cloudTarget = (): Target => ({
  name: "cloud",