Method pollDeviceTokenOnce

src/node/services/codexOauthService.ts:646–707

(
    flow: DeviceFlow
  )

  }

  private async pollDeviceTokenOnce(
    flow: DeviceFlow
  ): Promise<
    | { kind: "success"; auth: CodexOauthAuth }
    | { kind: "pending" }
    | { kind: "fatal"; message: string }
  > {
    try {
      const response = await fetch(CODEX_OAUTH_DEVICE_TOKEN_POLL_URL, {
        method: "POST",
        headers: { "Content-Type": "application/json" },
        body: JSON.stringify({ device_auth_id: flow.deviceAuthId, user_code: flow.userCode }),
        signal: flow.abortController.signal,
      });

      if (response.status === 403 || response.status === 404) {
        return { kind: "pending" };
      }

      if (response.status !== 200) {
        const errorText = await response.text().catch(() => "");
        const prefix = `Codex OAuth device token poll failed (${response.status})`;
        return { kind: "fatal", message: errorText ? `${prefix}: ${errorText}` : prefix };
      }

      const json = (await response.json().catch(() => null)) as unknown;
      if (!isPlainObject(json)) {
        return { kind: "fatal", message: "Codex OAuth device token poll returned invalid JSON" };
      }

      const authorizationCode =
        typeof json.authorization_code === "string" ? json.authorization_code : null;
      const codeVerifier = typeof json.code_verifier === "string" ? json.code_verifier : null;

      if (!authorizationCode || !codeVerifier) {
        return {
          kind: "fatal",
          message: "Codex OAuth device token poll response missing required fields",
        };
      }

      const tokenResult = await this.exchangeCodeForTokens({
        code: authorizationCode,
        redirectUri: "https://auth.openai.com/deviceauth/callback",
        codeVerifier,
      });

      if (!tokenResult.success) {
        return { kind: "fatal", message: tokenResult.error };
      }

      return { kind: "success", auth: tokenResult.data };
    } catch (error) {
      // Abort is treated as cancellation.
      if (flow.abortController.signal.aborted) {
        return { kind: "fatal", message: "OAuth flow cancelled" };
      }