Function requestAccessCredential

cmd/auth.go:360–399

(tokType string, domain string)

}

func requestAccessCredential(tokType string, domain string) (storedCredential, error) {
	if err := ensureOAuthAppCredentials(tokType); err != nil {
		return storedCredential{}, err
	}

	conf := oauthConfig(tokType, domain)
	verifier := generateOAuthVerifier()
	state := generateOAuthState()
	authCodeURL := conf.AuthCodeURL(state,
		oauth2.S256ChallengeOption(verifier),
		oauth2.SetAuthURLParam(tokenAccessTypeParam, tokenAccessTypeOffline),
	)

	fmt.Printf("1. Go to %v\n", authCodeURL)
	fmt.Printf("2. Click \"Allow\" (you might have to log in first).\n")
	fmt.Printf("3. Copy the authorization code.\n")
	fmt.Printf("Enter the authorization code here: ")

	code, err := readAuthorizationCode()
	if err != nil {
		return storedCredential{}, err
	}
	token, err := exchangeAuthorizationCode(currentContext(), conf, code, verifier)
	if err != nil {
		return storedCredential{}, authExchangeFailedErrorfWithDetails("exchange authorization code: %w", map[string]any{
			"token_type": authTokenTypeName(tokType),
		}, err)
	}
	if token == nil || token.AccessToken == "" {
		return storedCredential{}, authExchangeFailedErrorWithDetails("authorization did not return an access token", map[string]any{
			"token_type": authTokenTypeName(tokType),
		})
	}
	if token.RefreshToken == "" {
		return storedCredential{}, authExchangeFailedErrorWithDetails("authorization did not return a refresh token", map[string]any{
			"token_type": authTokenTypeName(tokType),
		})
	}
	return storedCredentialFromOAuthToken(token, conf.ClientID), nil
}

func refreshStoredCredential(tokType string, domain string, credential storedCredential) (storedCredential, error) {
	appKey := credential.AppKey