Class CrossDeviceLoginTokenFetcher

awscli/customizations/login/utils.py:266–337

Logs in by prompting the user to enter the auth code, intended for when the user is unable to open a web browser on the same device where the CLI is running.

class CrossDeviceLoginTokenFetcher(BaseLoginTokenFetcher):
    """
    Logs in by prompting the user to enter the auth code,
    intended for when the user is unable to open a web browser
    on the same device where the CLI is running.
    """

    def fetch_token(self):
        register_feature_id('LOGIN_CROSS_DEVICE')
        redirect_uri = f'{self._base_endpoint}/v1/sessions/confirmation'

        authorization_uri = self._get_authorization_uri(
            client_id=CLIENT_ID[LoginType.CROSS_DEVICE],
            expected_state=self._expected_state,
            code_challenge=self._code_challenge,
            redirect_uri=redirect_uri,
        )

        self._on_pending_authorization(
            **self._get_browser_handler_args(authorization_uri)
        )

        verification_code = self._prompt(
            '\nEnter the authorization code displayed in your browser'
        )

        auth_code, state = self.parse_verification_code(verification_code)

        if auth_code is None:
            raise LoginAuthorizationCodeError(
                error_msg='Failed to retrieve an authorization code.'
            )

        if state != str(self._expected_state):
            raise LoginAuthorizationCodeError(
                error_msg=f'State parameter {state} does not match expected value {self._expected_state}.'
            )

        return self._exchange_auth_code_for_access_token(
            client_id=CLIENT_ID[LoginType.CROSS_DEVICE],
            auth_code=auth_code,
            redirect_uri=redirect_uri,
        )

    @staticmethod
    def parse_verification_code(verification_code):
        """
        Parse the verification code that the user pastes from the browser,
        which is expected to be base64-encoded 'state={state}&auth_code={code}'
        """
        try:
            query_string = base64.b64decode(verification_code).decode('utf-8')
        except (UnicodeDecodeError, binascii.Error):
            raise ValueError('Failed to decode the verification code.')

        params_dict = dict(parse_qsl(query_string))

        if 'state' not in params_dict or 'code' not in params_dict: