Method handleCallback

packages/cloud/src/WebAuthService.ts:302–357

* Handle the callback from Roo Code Cloud * * This method is called when the user is redirected back to the extension * after authenticating with Roo Code Cloud. * * @param code The authorization code from the callback * @param state The state parameter from the callback * @param organ

(
		code: string | null,
		state: string | null,
		organizationId?: string | null,
		providerModel?: string | null,
	)

	 * @param providerModel The model ID selected during signup (optional)
	 */
	public async handleCallback(
		code: string | null,
		state: string | null,
		organizationId?: string | null,
		providerModel?: string | null,
	): Promise<void> {
		if (!code || !state) {
			const vscode = await importVscode()

			if (vscode) {
				vscode.window.showInformationMessage("Invalid Roo Code Cloud sign in url")
			}

			return
		}

		try {
			// Validate state parameter to prevent CSRF attacks.
			const storedState = this.context.globalState.get(AUTH_STATE_KEY)

			if (state !== storedState) {
				this.log("[auth] State mismatch in callback")
				throw new Error("Invalid state parameter. Authentication request may have been tampered with.")
			}

			const credentials = await this.clerkSignIn(code)

			// Set organizationId (null for personal accounts)
			credentials.organizationId = organizationId || null

			await this.storeCredentials(credentials)

			// Store the provider model if provided, or flag that no model was selected
			if (providerModel) {
				await this.context.globalState.update("roo-provider-model", providerModel)
				await this.context.globalState.update("roo-auth-skip-model", undefined)
				this.log(`[auth] Stored provider model: ${providerModel}`)
			} else {
				// No model was selected during signup - flag this for the webview
				await this.context.globalState.update("roo-auth-skip-model", true)
				this.log(`[auth] No provider model selected during signup`)
			}

			const vscode = await importVscode()

			if (vscode) {
				vscode.window.showInformationMessage("Successfully authenticated with Roo Code Cloud")
			}

			this.log("[auth] Successfully authenticated with Roo Code Cloud")
		} catch (error) {
			this.log(`[auth] Error handling Roo Code Cloud callback: ${error}`)
			this.changeState("logged-out")
			throw new Error(`Failed to handle Roo Code Cloud callback: ${error}`)
		}
	}

	/**