Function auth_callback

app/api/agentops/auth/views.py:257–293

Serves the authentication callback page, which captures the tokens from the URL hash and forwards them to our auth_session endpoint. This view just serves the HTML page, which is a simple JavaScript app that captures the tokens from the URL hash and forwards them to our auth_sessio

(request: Request)

@public_route
async def auth_callback(request: Request) -> HTMLResponse:
    """
    Serves the authentication callback page, which captures the tokens from the URL hash
    and forwards them to our auth_session endpoint.

    This view just serves the HTML page, which is a simple JavaScript app that
    captures the tokens from the URL hash and forwards them to our auth_session endpoint.
    """
    # Content Security Policy headers prevent any scripts from running on the page,
    # except those with the correct nonce
    nonce = base64.b64encode(os.urandom(32)).decode('utf-8')
    headers = {
        'Content-Security-Policy': f"script-src 'nonce-{nonce}'",
        'Referrer-Policy': 'no-referrer',
    }

    # Check if there's a redirect_to parameter in the query string
    redirect_to = request.query_params.get('redirect_to')

    # If no explicit redirect_to, check for invite parameter to construct the redirect
    if not redirect_to:
        invite_org_id = request.query_params.get('invite')
        if invite_org_id:
            redirect_to = f"{APP_URL}/settings/organization?invite={invite_org_id}"
        else:
            redirect_to = DASHBOARD_URL

    # Ensure the redirect URL is to our app domain for security
    if not redirect_to.startswith(APP_URL):
        redirect_to = DASHBOARD_URL

    template = templates.get_template('auth_callback.html')
    content = template.render(
        nonce=nonce, auth_session_url=reverse_path('auth_session'), dashboard_url=redirect_to
    )

    return HTMLResponse(content=content, headers=headers)


def _create_session_for_response(response: Response, access_token: str) -> Response: