موافقة المستخدم وPKCE وتبادل الرمز

import { randomBytes, createHash } from 'node:crypto';
const state = randomBytes(32).toString('base64url');
const verifier = randomBytes(32).toString('base64url');
const challenge = createHash('sha256').update(verifier).digest('base64url');
// Store { state, verifier } in the initiating server-side session.
const url = new URL('https://raselmail.com/oauth/authorize');
url.search = new URLSearchParams({
  response_type: 'code', client_id: 'YOUR_CLIENT_ID',
  redirect_uri: 'https://client.example/oauth/callback',
  scope: 'mail.read', state,
  code_challenge: challenge, code_challenge_method: 'S256',
}).toString();
// Redirect the browser to url.href.

curl -i 'https://raselmail.com/api/v1/oauth/token'   -u "$RASEL_CLIENT_ID:$RASEL_CLIENT_SECRET"   --data-urlencode 'grant_type=authorization_code'   --data-urlencode "code=$AUTHORIZATION_CODE"   --data-urlencode 'redirect_uri=https://client.example/oauth/callback'   --data-urlencode "code_verifier=$PKCE_VERIFIER"