Exchange Login Code

curl -X POST https://api.rs-tunnel.example.com/v1/auth/exchange \
  -H "Content-Type: application/json" \
  -d '{
    "loginCode": "dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk",
    "codeVerifier": "dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk"
  }'

import { createHash, randomBytes } from 'node:crypto';
import { createServer } from 'node:http';

// Step 1: Generate PKCE pair
const codeVerifier = randomBytes(32).toString('base64url');
const codeChallenge = createHash('sha256')
  .update(codeVerifier)
  .digest('base64url');

// Step 2: Start local callback server
const callbackUrl = 'http://127.0.0.1:56789/callback';
let loginCode: string;

const server = createServer((req, res) => {
  const url = new URL(req.url!, `http://${req.headers.host}`);
  loginCode = url.searchParams.get('code')!;
  res.writeHead(200);
  res.end('Authentication successful! You may close this window.');
  server.close();
});

server.listen(56789);

// Step 3: Start OAuth flow
const startResponse = await fetch('https://api.rs-tunnel.example.com/v1/auth/start', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({
    email: '[email protected]',
    codeChallenge,
    cliCallbackUrl: callbackUrl,
  }),
});

const { authorizeUrl, state } = await startResponse.json();

// Step 4: Open browser (user authorizes via Slack)
console.log('Opening browser:', authorizeUrl);
open(authorizeUrl); // Use 'open' package or similar

// Step 5: Wait for callback (server receives loginCode)
await new Promise((resolve) => server.on('close', resolve));

// Step 6: Exchange login code for tokens
const exchangeResponse = await fetch('https://api.rs-tunnel.example.com/v1/auth/exchange', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({
    loginCode,
    codeVerifier,
  }),
});

const tokens = await exchangeResponse.json();
console.log('Authenticated as:', tokens.profile.email);

// Store tokens securely
fs.writeFileSync('~/.rs-tunnel/tokens.json', JSON.stringify(tokens), { mode: 0o600 });