oauth2-cli 0.8.2 → 0.8.3

package/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 All notable changes to this project will be documented in this file. See [commit-and-tag-version](https://github.com/absolute-version/commit-and-tag-version) for commit guidelines.
 
+## [0.8.3](https://github.com/battis/oauth2-cli/compare/oauth2-cli/0.8.2...oauth2-cli/0.8.3) (2026-02-18)
+
+
+### Bug Fixes
+
+* continued server timeout improvements ([2e8d275](https://github.com/battis/oauth2-cli/commit/2e8d275706be411b317e2257bd97ee8f7fe4bc95))
+
 ## [0.8.2](https://github.com/battis/oauth2-cli/compare/oauth2-cli/0.8.1...oauth2-cli/0.8.2) (2026-02-18)
 
 

package/dist/Session.d.ts

@@ -28,7 +28,7 @@ export declare class Session {
      * {@link authorizationCodeGrant}
      */
     get resolve(): SessionResolver;
-    reject(error: Error): void;
+    reject(cause: unknown): void;
     constructor({ client, views, inject: request }: SessionOptions);
     /** Instantiate the web server that will listen for the out-of-band redirect */
     protected instantiateWebServer(options: Omit<WebServer.WebServerOptions, 'session'>): WebServer.WebServerInterface;

package/dist/Session.js

@@ -20,12 +20,12 @@ export class Session {
      */
     get resolve() {
         if (!this._resolve) {
-            throw new Error('callback is missing');
+            throw new Error(`Session resolve method is ${this._resolve}`);
         }
         return this._resolve;
     }
-    reject(error) {
-        throw error;
+    reject(cause) {
+        throw new Error('Session failed', { cause });
     }
     constructor({ client, views, inject: request }) {
         this.spinner = ora('Awaiting interactive authorization').start();
@@ -58,12 +58,26 @@ export class Session {
                         if (!closed) {
                             this.spinner.text =
                                 'Still waiting for out-of-band redirect server to shut down.\n' +
-                                    '  Your browser may be holding the connection to the server open.\n' +
-                                    '  Please close the "Authorization Complete" tab in your browser.\n\n' +
-                                    '    If you are browsing in Chrome, close the window.\n' +
-                                    '    If you are browsing in Opera, quit the browser.';
+                                    '  Your browser may be holding the connection to the server open.\n\n' +
+                                    '  Please close the "Authorization Complete" tab in your browser.';
+                        }
+                    }, 5000);
+                    setTimeout(() => {
+                        if (!closed) {
+                            this.spinner.text =
+                                'Still waiting for out-of-band redirect server to shut down.\n' +
+                                    '  Your browser may be holding the connection to the server open.\n\n' +
+                                    '  Please close the browser window.';
                         }
                     }, 10000);
+                    setTimeout(() => {
+                        if (!closed) {
+                            this.spinner.text =
+                                'Still waiting for out-of-band redirect server to shut down.\n' +
+                                    '  Your browser may be holding the connection to the server open.\n\n' +
+                                    '  Please quit the browser.';
+                        }
+                    }, 15000);
                 };
                 const url = gcrtl
                     .expand(this.outOfBandRedirectServer.authorization_endpoint, this.client.redirect_uri)

package/dist/WebServer.d.ts

@@ -15,6 +15,15 @@ export type WebServerOptions = {
      * URL, the first step in the Authorization Code Grant flow.
      */
     authorize_endpoint?: PathString;
+    /**
+     * The number of milliseconds of inactivity before a socket is presumed to
+     * have timed out. This can be reduced to limit potential wait times during
+     * interactive authentication, but must still be long enough to allow time for
+     * the authorization code to be exchanged for an access token.
+     *
+     * Defaults to 1000 milliseconds
+     */
+    timeout?: number;
 };
 export declare const DEFAULT_AUTHORIZE_ENDPOINT = "/oauth2-cli/authorize";
 export interface WebServerInterface {
@@ -35,7 +44,7 @@ export declare class WebServer implements WebServerInterface {
     protected readonly port: string;
     readonly authorization_endpoint: PathString;
     private server;
-    constructor({ session, views, authorize_endpoint }: WebServerOptions);
+    constructor({ session, views, authorize_endpoint, timeout }: WebServerOptions);
     /**
      * Set the path to folder of *.ejs templates
      *

package/dist/WebServer.js

@@ -23,7 +23,8 @@ export class WebServer {
     port;
     authorization_endpoint;
     server;
-    constructor({ session, views, authorize_endpoint = DEFAULT_AUTHORIZE_ENDPOINT }) {
+    constructor({ session, views, authorize_endpoint = DEFAULT_AUTHORIZE_ENDPOINT, timeout = 1000 // milliseconds
+     }) {
         this.session = session;
         this.authorization_endpoint = authorize_endpoint;
         this.views = views;
@@ -37,6 +38,9 @@ export class WebServer {
         app.get(this.authorization_endpoint, this.handleAuthorizationEndpoint.bind(this));
         app.get(gcrtl.path(url), this.handleRedirect.bind(this));
         this.server = app.listen(gcrtl.port(url));
+        this.server.timeout = timeout;
+        this.server.keepAliveTimeout = 0;
+        this.server.keepAliveTimeoutBuffer = 0;
     }
     /**
      * Set the path to folder of *.ejs templates
@@ -87,7 +91,7 @@ export class WebServer {
         try {
             await this.session.handleAuthorizationCodeRedirect(req);
             if (!(await this.render(res, 'complete.ejs'))) {
-                res.send('You may close this window.');
+                res.send('Authorization complete. You may close this window.');
             }
         }
         catch (error) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "oauth2-cli",
-  "version": "0.8.2",
+  "version": "0.8.3",
   "description": "Acquire API access tokens via OAuth 2.0 within CLI tools",
   "homepage": "https://github.com/battis/oauth2-cli/tree/main/packages/oauth2-cli#readme",
   "repository": {

package/views/error.ejs

@@ -32,9 +32,7 @@
       <div class="center container">
         <h1>Authorization Error</h1>
         <div class="alert alert-danger" role="alert">
-          <% if (typeof error === 'string') { %><%= error %><<% } else { %>
-          <pre><%= JSON.stringify(error,null,2) %></pre>
-          <% } %>
+          <pre><%= JSON.stringify(error, null, 2) %></pre>
         </div>
         <p>You may close this window.</p>
       </div>