Method register

crates/chat-cli/src/auth/pkce.rs:188–228

(
        client: &impl PkceClient,
        region: Region,
        issuer_url: String,
        timeout: Option<Duration>,
    )

impl PkceRegistration {
    pub async fn register(
        client: &impl PkceClient,
        region: Region,
        issuer_url: String,
        timeout: Option<Duration>,
    ) -> Result<Self, AuthError> {
        let listener = TcpListener::bind("127.0.0.1:0").await?;
        let redirect_uri = format!("http://{}/oauth/callback", listener.local_addr()?);
        let code_verifier = generate_code_verifier();
        let code_challenge = generate_code_challenge(&code_verifier);
        let state = rand::rng()
            .sample_iter(rand::distr::Alphanumeric)
            .take(10)
            .collect::<Vec<_>>();
        let state = String::from_utf8(state).unwrap_or("state".to_string());

        let response = client.register_client(redirect_uri.clone(), issuer_url.clone()).await?;

        let query = PkceQueryParams {
            client_id: response.client_id().to_string(),
            redirect_uri: redirect_uri.clone(),
            // Scopes must be space delimited.
            scopes: SCOPES.join(" "),
            state: state.clone(),
            code_challenge: code_challenge.clone(),
            code_challenge_method: "S256".to_string(),
        };
        let url = format!("{}/authorize?{}", oidc_url(&region), query.as_query_params());

        Ok(Self {
            url,
            registered_client: response,
            code_verifier,
            state,
            listener,
            redirect_uri,
            region,
            issuer_url,
            timeout: timeout.unwrap_or(DEFAULT_AUTHORIZATION_TIMEOUT),
        })
    }

    /// Hosts a local HTTP server to listen for browser redirects. If a [`Database`] is passed,
    /// then the access and refresh tokens will be saved.