insomnia/packages/insomnia-app/app/network/o-auth-2/misc.js

import electron from 'electron';
import uuid from 'uuid';
import querystring from 'querystring';

const AUTH_WINDOW_SESSION_ID = uuid.v4();

export function responseToObject(body, keys) {
  let data = null;
  try {
    data = JSON.parse(body);
  } catch (err) {}

  if (!data) {
    try {
      data = querystring.parse(body);
    } catch (err) {}
  }

  let results = {};
  for (const key of keys) {
    results[key] = data[key] !== undefined ? data[key] : null;
  }

  return results;
}

export function authorizeUserInWindow(
  url,
  urlSuccessRegex = /(code=).*/,
  urlFailureRegex = /(error=).*/
) {
  return new Promise((resolve, reject) => {
    let finalUrl = null;

    function _parseUrl(currentUrl) {
      if (currentUrl.match(urlSuccessRegex)) {
        console.log(
          `[oauth2] Matched success redirect to "${currentUrl}" with ${urlSuccessRegex.toString()}`
        );
        finalUrl = currentUrl;
        child.close();
      } else if (currentUrl.match(urlFailureRegex)) {
        console.log(
          `[oauth2] Matched error redirect to "${currentUrl}" with ${urlFailureRegex.toString()}`
        );
        finalUrl = currentUrl;
        child.close();
      } else if (currentUrl === url) {
        // It's the first one, so it's not a redirect
        console.log(`[oauth2] Loaded "${currentUrl}"`);
      } else {
        console.log(
          `[oauth2] Ignoring URL "${currentUrl}". Didn't match ${urlSuccessRegex.toString()}`
        );
      }
    }

    // Create a child window
    const child = new electron.remote.BrowserWindow({
      webPreferences: {
        nodeIntegration: false,
        partition: `oauth2_${AUTH_WINDOW_SESSION_ID}`
      },
      show: false
    });

    // Finish on close
    child.on('close', () => {
      if (finalUrl) {
        resolve(finalUrl);
      } else {
        let errorDescription = 'Authorization window closed';
        reject(new Error(errorDescription));
      }
    });

    // Catch the redirect after login
    child.webContents.on('did-navigate', () => {
      // Be sure to resolve URL so that we can handle redirects with no host like /foo/bar
      const currentUrl = child.webContents.getURL();
      _parseUrl(currentUrl);
    });

    child.webContents.on(
      'did-fail-load',
      (e, errorCode, errorDescription, url) => {
        // Listen for did-fail-load to be able to parse the URL even when the callback server is unreachable
        _parseUrl(url);
      }
    );

    // Show the window to the user after it loads
    child.on('ready-to-show', child.show.bind(child));
    child.loadURL(url);
  });
}