Failed OAuth callbacks leave the listener running #19

New issue

Open

opened 2026-08-22 23:33:32 +03:00 by jaroheinonen · 0 comments

jaroheinonen commented

2026-08-22 23:33:32 +03:00

Owner

When token exchange fails, the callback handler in ListenForToken() reports the error but does not close the HTTP server. Retrying login in the same TUI session with the same redirect port can consequently fail because the previous listener still owns the port.

This was reproduced by sending a callback with an invalid OAuth state and then attempting to bind a second listener to the redirect address; the bind failed with address already in use after the error callback completed.

When token exchange fails, the callback handler in `ListenForToken()` reports the error but does not close the HTTP server. Retrying login in the same TUI session with the same redirect port can consequently fail because the previous listener still owns the port. This was reproduced by sending a callback with an invalid OAuth state and then attempting to bind a second listener to the redirect address; the bind failed with `address already in use` after the error callback completed.

jaroheinonen added the

bug

label

2026-08-22 23:33:32 +03:00

jaroheinonen self-assigned this

2026-08-22 23:33:32 +03:00