Function verify

aiscript-vm/src/builtins/sso.rs:144–210

(state: &mut State<'gc>, args: Vec<Value<'gc>>)

}

fn verify<'gc>(state: &mut State<'gc>, args: Vec<Value<'gc>>) -> Result<Value<'gc>, VmError> {
    let mut i = 0;
    let mut code = None;

    while i < args.len() {
        match &args[i] {
            Value::String(key) if i + 1 < args.len() => match key.to_str().unwrap() {
                "code" => {
                    code = Some(args[i + 1].as_string()?);
                    i += 2;
                }
                _ => {
                    return Err(VmError::RuntimeError(format!(
                        "Unknown keyword argument: {}",
                        key
                    )));
                }
            },
            _ => {
                return Err(VmError::RuntimeError(
                    "verify() requires keyword arguments (e.g., verify(code=\"abc\"))".into(),
                ));
            }
        }
    }

    let code = code
        .ok_or_else(|| VmError::RuntimeError("verify() requires 'code' keyword argument".into()))?;

    let mut fields = parse_auth_fields(state)?;
    let userinfo_endpoint = mem::take(&mut fields.userinfo_endpoint);

    let http_client = reqwest::ClientBuilder::new()
        // Following redirects opens the client up to SSRF vulnerabilities.
        .redirect(reqwest::redirect::Policy::none())
        .build()
        .expect("Client should build");

    Handle::current().block_on(async {
        let token = get_client(fields)
            .exchange_code(AuthorizationCode::new(code.to_string()))
            .request_async(&http_client)
            .await
            .map_err(|err| VmError::RuntimeError(err.to_string()))?;
        let access_token = token.access_token().secret().to_owned();

        let response = http_client
            .get(userinfo_endpoint)
            .header("Authorization", format!("Bearer {}", access_token))
            .send()
            .await
            .map_err(|err| VmError::RuntimeError(err.to_string()))?;

        if !response.status().is_success() {
            return Err(VmError::RuntimeError(format!(
                "Failed to fetch user info: {}",
                response.status()
            )));