runCodeMieSsoCliFlow function

Future<CodeMieSsoCredentials?> runCodeMieSsoCliFlow({
  1. required String codeMieUrl,
  2. required void onStatus(
    1. String
    ),
  3. Future<bool> openBrowserFn(
    1. String
    ) = openBrowser,
  4. bool shouldOpenBrowserFn() = defaultBrowserLaunchPolicy,
  5. Duration timeout = const Duration(minutes: 5),
})

Runs the CodeMie SSO login: starts the callback server, opens (or prints) the organization's login URL, waits for the token, and decodes it into CodeMieSsoCredentials. Returns null on cancel/timeout/failure.

The authorization URL is printed in EVERY outcome (gh-1450) — launch attempted, failed, skipped (a false shouldOpenBrowserFn: the --no-browser flag / FA_NO_BROWSER env / headless auto-detect), and timeout. openBrowserFn, shouldOpenBrowserFn and timeout are injectable for tests.

Implementation

Future<CodeMieSsoCredentials?> runCodeMieSsoCliFlow({
  required String codeMieUrl,
  required void Function(String) onStatus,
  Future<bool> Function(String) openBrowserFn = openBrowser,
  bool Function() shouldOpenBrowserFn = defaultBrowserLaunchPolicy,
  Duration timeout = const Duration(minutes: 5),
}) async {
  final server = CodeMieSsoCallbackServer();
  final port = await server.start(timeout: timeout);
  final ssoUrl = buildCodeMieSsoUrl(codeMieUrl, port);
  onStatus('listening for the CodeMie SSO callback on port $port');
  await openAuthUrlWithStatus(
    url: ssoUrl,
    launchBrowser: shouldOpenBrowserFn(),
    openBrowserFn: openBrowserFn,
    onStatus: onStatus,
    openedMessage: 'browser opened; complete the CodeMie sign-in',
  );
  final token = await () async {
    // The CodeMie page often signs in BY ITSELF (existing browser session →
    // instant redirect) — wait patiently with a live status line, and bail
    // only after a generous timeout instead of hanging forever.
    onStatus(
      'waiting for the CodeMie SSO callback (the page may sign in by '
      'itself)…',
    );
    final wait = timeout;
    final statusTimer = Timer.periodic(const Duration(seconds: 15), (t) {
      onStatus('still waiting for the SSO callback… (${t.tick * 15}s)');
    });
    try {
      return await server.waitForToken().timeout(wait, onTimeout: () => null);
    } finally {
      statusTimer.cancel();
    }
  }();
  if (token == null) {
    onStatus('no SSO callback received (timeout or cancelled)');
    // Last-chance rescue (gh-1450 AC4): the URL one more time, as the
    // final line a returning user can still act on.
    onStatus('$authorizationUrlPrefix$ssoUrl');
    return null;
  }
  try {
    final cookies = decodeCodeMieSsoToken(token);
    final credentials = CodeMieSsoCredentials(
      cookies: cookies,
      apiUrl: codeMieApiBase(codeMieUrl),
      expiresAt: deriveCodeMieExpiresAt(cookies),
    );
    if (credentials.authToken.isEmpty) {
      onStatus('CodeMie SSO callback carried no cookies');
      return null;
    }
    onStatus('CodeMie authorized');
    return credentials;
  } on FormatException catch (error) {
    onStatus('CodeMie SSO failed: ${error.message}');
    return null;
  }
}