Function pollForToken

packages/arctic/src/auth/codex.ts:240–275

(deviceAuthId: string, userCode: string, interval: number)

  }

  export async function pollForToken(deviceAuthId: string, userCode: string, interval: number): Promise<TokenResponse> {
    const url = issuerPath("/api/accounts/deviceauth/token")
    const startTime = Date.now()
    const maxWait = DEVICE_AUTH_TIMEOUT_MS
    const pollIntervalMs = Math.max(interval, 5) * 1000

    while (true) {
      const response = await fetch(url, {
        method: "POST",
        headers: {
          "Content-Type": "application/json",
        },
        body: JSON.stringify({
          device_auth_id: deviceAuthId,
          user_code: userCode,
        }),
      })

      if (response.ok) {
        const payload = (await response.json()) as DeviceAuthTokenResponse
        return exchangeAuthorizationCodeForTokens(payload.authorization_code, payload.code_verifier)
      }

      if (response.status === 403 || response.status === 404) {
        if (Date.now() - startTime >= maxWait) {
          throw new Error("Device auth timed out after 15 minutes")
        }
        const remaining = maxWait - (Date.now() - startTime)
        await Bun.sleep(Math.min(pollIntervalMs, remaining))
        continue
      }

      const errorText = await response.text()
      throw new Error(`Device auth failed with status ${response.status} - ${errorText}`)
    }
  }

  async function exchangeAuthorizationCodeForTokens(code: string, codeVerifier: string): Promise<TokenResponse> {
    const url = issuerPath("/oauth/token")