"use client"; import { useState, useEffect, useRef, useCallback } from "react"; import { Modal, Button, Input } from "@/shared/components"; import { useCopyToClipboard } from "@/shared/hooks/useCopyToClipboard"; /** * OAuth Modal Component * - Localhost: Auto callback via popup message * - Remote: Manual paste callback URL */ export default function OAuthModal({ isOpen, provider, providerInfo, onSuccess, onClose }) { const [step, setStep] = useState("waiting"); // waiting | input | success | error const [authData, setAuthData] = useState(null); const [callbackUrl, setCallbackUrl] = useState(""); const [error, setError] = useState(null); const [isDeviceCode, setIsDeviceCode] = useState(false); const [deviceData, setDeviceData] = useState(null); const [polling, setPolling] = useState(false); const popupRef = useRef(null); const { copied, copy } = useCopyToClipboard(); // Detect if running on localhost const isLocalhost = typeof window !== "undefined" && (window.location.hostname === "localhost" || window.location.hostname === "127.0.0.1"); // Reset state and start OAuth when modal opens useEffect(() => { if (isOpen && provider) { setAuthData(null); setCallbackUrl(""); setError(null); setIsDeviceCode(false); setDeviceData(null); setPolling(false); // Auto start OAuth startOAuthFlow(); } }, [isOpen, provider]); // Listen for OAuth callback via multiple methods const callbackProcessedRef = useRef(false); useEffect(() => { if (!authData) return; callbackProcessedRef.current = false; // Reset when authData changes // Handler for callback data - only process once const handleCallback = async (data) => { if (callbackProcessedRef.current) return; // Already processed const { code, state, error: callbackError, errorDescription } = data; if (callbackError) { callbackProcessedRef.current = true; setError(errorDescription || callbackError); setStep("error"); return; } if (code) { callbackProcessedRef.current = true; await exchangeTokens(code, state); } }; // Method 1: postMessage from popup const handleMessage = (event) => { if (event.origin !== window.location.origin) return; if (event.data?.type === "oauth_callback") { handleCallback(event.data.data); } }; window.addEventListener("message", handleMessage); // Method 2: BroadcastChannel let channel; try { channel = new BroadcastChannel("oauth_callback"); channel.onmessage = (event) => handleCallback(event.data); } catch (e) { console.log("BroadcastChannel not supported"); } // Method 3: localStorage event const handleStorage = (event) => { if (event.key === "oauth_callback" && event.newValue) { try { const data = JSON.parse(event.newValue); handleCallback(data); localStorage.removeItem("oauth_callback"); } catch (e) { console.log("Failed to parse localStorage data"); } } }; window.addEventListener("storage", handleStorage); // Also check localStorage on mount (in case callback already happened) try { const stored = localStorage.getItem("oauth_callback"); if (stored) { const data = JSON.parse(stored); // Only use if recent (within 30 seconds) if (data.timestamp && Date.now() - data.timestamp < 30000) { handleCallback(data); localStorage.removeItem("oauth_callback"); } } } catch (e) {} return () => { window.removeEventListener("message", handleMessage); window.removeEventListener("storage", handleStorage); if (channel) channel.close(); }; }, [authData]); // Exchange tokens const exchangeTokens = async (code, state) => { try { const res = await fetch(`/api/oauth/${provider}/exchange`, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ code, redirectUri: authData.redirectUri, codeVerifier: authData.codeVerifier, state, }), }); const data = await res.json(); if (!res.ok) throw new Error(data.error); setStep("success"); onSuccess?.(); } catch (err) { setError(err.message); setStep("error"); } }; // Start OAuth flow const startOAuthFlow = async () => { if (!provider) return; try { setError(null); // Device code flow (GitHub, Qwen) if (provider === "github" || provider === "qwen") { setIsDeviceCode(true); setStep("waiting"); const res = await fetch(`/api/oauth/${provider}/device-code`); const data = await res.json(); if (!res.ok) throw new Error(data.error); setDeviceData(data); // Open verification URL const verifyUrl = data.verification_uri_complete || data.verification_uri; if (verifyUrl) window.open(verifyUrl, "_blank"); // Start polling startPolling(data.device_code, data.codeVerifier, data.interval || 5); return; } // Authorization code flow - always use localhost with current port (except Codex) let redirectUri; if (provider === "codex") { // Codex requires fixed port 1455 redirectUri = "http://localhost:1455/auth/callback"; } else { // Always use localhost with current port for OAuth callback const port = window.location.port || (window.location.protocol === "https:" ? "443" : "80"); redirectUri = `http://localhost:${port}/callback`; } const res = await fetch(`/api/oauth/${provider}/authorize?redirect_uri=${encodeURIComponent(redirectUri)}`); const data = await res.json(); if (!res.ok) throw new Error(data.error); setAuthData({ ...data, redirectUri }); // For Codex, always use manual input since it requires fixed port 1455 if (provider === "codex") { setStep("input"); window.open(data.authUrl, "_blank"); } else if (isLocalhost) { // Other providers on localhost: Open popup and wait for message setStep("waiting"); popupRef.current = window.open(data.authUrl, "oauth_popup", "width=600,height=700"); // Check if popup was blocked if (!popupRef.current) { setStep("input"); } } else { // Remote: Show manual input setStep("input"); window.open(data.authUrl, "_blank"); } } catch (err) { setError(err.message); setStep("error"); } }; // Poll for device code token const startPolling = async (deviceCode, codeVerifier, interval) => { setPolling(true); const maxAttempts = 60; for (let i = 0; i < maxAttempts; i++) { await new Promise((r) => setTimeout(r, interval * 1000)); try { const res = await fetch(`/api/oauth/${provider}/poll`, { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ deviceCode, codeVerifier }), }); const data = await res.json(); if (data.success) { setStep("success"); setPolling(false); onSuccess?.(); return; } if (data.error === "expired_token" || data.error === "access_denied") { throw new Error(data.errorDescription || data.error); } if (data.error === "slow_down") { interval = Math.min(interval + 5, 30); } } catch (err) { setError(err.message); setStep("error"); setPolling(false); return; } } setError("Authorization timeout"); setStep("error"); setPolling(false); }; // Handle manual URL input const handleManualSubmit = async () => { try { setError(null); const url = new URL(callbackUrl); const code = url.searchParams.get("code"); const state = url.searchParams.get("state"); const errorParam = url.searchParams.get("error"); if (errorParam) { throw new Error(url.searchParams.get("error_description") || errorParam); } if (!code) { throw new Error("No authorization code found in URL"); } await exchangeTokens(code, state); } catch (err) { setError(err.message); setStep("error"); } }; if (!provider || !providerInfo) return null; return (
{/* Waiting Step (Localhost - popup mode) */} {step === "waiting" && !isDeviceCode && (
progress_activity

Waiting for Authorization

Complete the authorization in the popup window.

)} {/* Device Code Flow - Waiting */} {step === "waiting" && isDeviceCode && deviceData && ( <>

Visit the URL below and enter the code:

Verification URL

{deviceData.verification_uri}

Your Code

{deviceData.user_code}

{polling && (
progress_activity Waiting for authorization...
)} )} {/* Manual Input Step */} {step === "input" && !isDeviceCode && ( <>

Step 1: Open this URL in your browser

Step 2: Paste the callback URL here

After authorization, copy the full URL from your browser.

setCallbackUrl(e.target.value)} placeholder={`${window.location.origin}/callback?code=...`} className="font-mono text-xs" />
)} {/* Success Step */} {step === "success" && (
check_circle

Connected Successfully!

Your {providerInfo.name} account has been connected.

)} {/* Error Step */} {step === "error" && (
error

Connection Failed

{error}

)}
); }