Function authorize

codecarbon/cli/auth.py:146–190

Run the OAuth2 Authorization Code flow with PKCE.

()

def authorize():
    """Run the OAuth2 Authorization Code flow with PKCE."""
    discovery = _discover_endpoints()

    session = OAuth2Session(
        client_id=AUTH_CLIENT_ID,
        redirect_uri=_REDIRECT_URI,
        scope="openid offline_access",
        token_endpoint_auth_method="none",
    )

    code_verifier = generate_token(48)
    code_challenge = create_s256_code_challenge(code_verifier)

    uri, state = session.create_authorization_url(
        discovery["authorization_endpoint"],
        code_challenge=code_challenge,
        code_challenge_method="S256",
    )

    _CallbackHandler.callback_url = None
    _CallbackHandler.error = None

    server = HTTPServer(("localhost", _REDIRECT_PORT), _CallbackHandler)

    print("Opening browser for authentication...")
    webbrowser.open(uri)

    server.handle_request()
    server.server_close()

    if _CallbackHandler.error:
        raise ValueError(f"Authorization failed: {_CallbackHandler.error}")

    if not _CallbackHandler.callback_url:
        raise ValueError("Authorization failed: no callback received")

    token = session.fetch_token(
        discovery["token_endpoint"],
        authorization_response=_CallbackHandler.callback_url,
        code_verifier=code_verifier,
    )

    _save_credentials(token)
    return token


def get_access_token() -> str: