Function github_authorize_callback

app/routers/github.py:208–274

Handle GitHub OAuth callback for account linking

(
    request: Request,
    current_user: User = Depends(get_current_user),
    db: AsyncSession = Depends(get_db),
    github_service: GitHubService = Depends(get_github_service),
    oauth_client=Depends(get_github_oauth_client),
)

@router.get("/authorize/callback", name="github_authorize_callback")
async def github_authorize_callback(
    request: Request,
    current_user: User = Depends(get_current_user),
    db: AsyncSession = Depends(get_db),
    github_service: GitHubService = Depends(get_github_service),
    oauth_client=Depends(get_github_oauth_client),
):
    """Handle GitHub OAuth callback for account linking"""

    redirect_url = safe_redirect(
        request,
        next_value=request.session.pop("redirect_after_github", "/"),
        referer=None,
    )

    if not oauth_client.github:
        flash(request, _("GitHub OAuth not configured."), "error")
        return RedirectResponse(redirect_url, status_code=303)

    try:
        token = await oauth_client.github.authorize_access_token(request)
        response = await oauth_client.github.get("user", token=token)
        github_user = response.json()

        existing_user = await get_user_by_provider(db, "github", str(github_user["id"]))
        if existing_user and existing_user.id != current_user.id:
            flash(
                request,
                _("This GitHub account is already linked to another user"),
                "error",
            )
            return RedirectResponse(redirect_url, status_code=303)

        result = await db.execute(
            select(UserIdentity).where(
                UserIdentity.user_id == current_user.id,
                UserIdentity.provider == "github",
            )
        )
        github_identity = result.scalar_one_or_none()

        if github_identity:
            github_identity.access_token = token["access_token"]
            github_identity.provider_metadata = {
                "login": github_user["login"],
                "name": github_user.get("name"),
            }
        else:
            github_identity = UserIdentity(
                user_id=current_user.id,
                provider="github",
                provider_user_id=str(github_user["id"]),
                access_token=token["access_token"],
                provider_metadata={
                    "login": github_user["login"],
                    "name": github_user.get("name"),
                },
            )