Module login 

Re-exports

use crate::cli::client::TokenResponseBody; 🔒

use crate::cli::client::fetch_discovery_document; 🔒

use crate::cli::client::unix_now; 🔒

use crate::cli::config::ProfileAuth; 🔒

use crate::cli::secrets::StoredTokens; 🔒

use crate::cli::state::CliState; 🔒

use crate::cli::state::SECRETS_LOCATION; 🔒

use base64::Engine as _; 🔒

use base64::engine::general_purpose::URL_SAFE_NO_PAD; 🔒

use haste_fhir_model::r4::generated::terminology::IssueType; 🔒

use haste_fhir_operation_error::OperationOutcomeError; 🔒

use sha2::Digest; 🔒

use sha2::Sha256; 🔒

use std::io::BufRead; 🔒

use std::io::BufReader; 🔒

use std::io::Write; 🔒

use std::net::TcpListener; 🔒

use std::sync::Arc; 🔒

use tokio::sync::Mutex; 🔒

Functions

bind_callback_listener 🔒

code_challenge_s256 🔒

open_in_browser 🔒

parse_redirect_port 🔒

random_url_safe_string 🔒

run 🔒

Runs the login command: the browser-based authorization_code + PKCE login flow for the active profile, caching the resulting tokens in the secrets file. With no_browser, prints the authorization URL instead of opening it.

wait_for_callback 🔒

Blocks waiting for the browser to redirect back with ?code=&state=, on a single connection to the loopback listener. Returns (code, state).