Function safeText

packages/cli/src/auth/oauth.ts:432–441

(res: Response)

}

async function safeText(res: Response): Promise<string> {
  try {
    // Token/revoke requests carry refresh_token, authorization code, and
    // code_verifier in the form body; a server/proxy error page can echo
    // request data back. Scrub before the text reaches any error message.
    return scrubCredentials((await res.text()).slice(0, 500));
  } catch {
    return "";
  }
}