Function readUserEmail

apps/cli/src/device-login.ts:81–87

(body: Record<string, unknown>)

/** Pull `user.email` out of a token response (WorkOS returns the user inline). */
const readUserEmail = (body: Record<string, unknown>): string | undefined => {
  const user = body.user;
  if (user && typeof user === "object" && "email" in user) {
    return asString((user as { email?: unknown }).email);
  }
  return undefined;
};

/**
 * Decode a JWT access token's claims WITHOUT verifying it. The CLI only uses