Function isUnauthenticatedCallback

apps/local/src/identity.ts:59–66

(request: Request)

// the shell's `isUnauthenticatedOAuthCallbackPath` exemption (cloud/self-host
// instead authenticate the callback via the same-origin session cookie).
const isUnauthenticatedCallback = (request: Request): boolean => {
  // oxlint-disable-next-line executor/no-try-catch-or-throw -- boundary: parsing a request URL that should always be valid here
  try {
    return /\/oauth\/callback(\/|$)/.test(new URL(request.url).pathname);
  } catch {
    return false;
  }
};

/**
 * Build the local `IdentityProvider`: validate the request's bearer token