#include "trading/auth/RedirectServer.h" #include "core/logging/Logger.h" #include #include #include #include namespace fincept::trading::auth { namespace { constexpr const char* kResponseHtml = "" "Fincept - Broker login" "" "

Login captured

" "

You can close this tab and return to Fincept Terminal.

"; } RedirectServer::RedirectServer(QObject* parent) : QObject(parent), server_(new QTcpServer(this)), timeout_timer_(new QTimer(this)) { timeout_timer_->setSingleShot(true); connect(server_, &QTcpServer::newConnection, this, &RedirectServer::handle_new_connection); connect(timeout_timer_, &QTimer::timeout, this, &RedirectServer::handle_timeout); } RedirectServer::~RedirectServer() { stop(); } bool RedirectServer::start(quint16 preferred_port, int timeout_seconds) { if (server_->isListening()) server_->close(); if (!server_->listen(QHostAddress::LocalHost, preferred_port)) { LOG_WARN("RedirectServer", QString("Port %1 busy - falling back to ephemeral").arg(preferred_port)); if (!server_->listen(QHostAddress::LocalHost, 0)) { LOG_ERROR("RedirectServer", QString("Failed to bind loopback: %1").arg(server_->errorString())); return false; } } port_ = server_->serverPort(); timeout_timer_->start(timeout_seconds * 1000); LOG_INFO("RedirectServer", QString("Listening on 127.0.0.1:%1").arg(port_)); return true; } void RedirectServer::stop() { timeout_timer_->stop(); if (server_->isListening()) server_->close(); } void RedirectServer::handle_new_connection() { QTcpSocket* sock = server_->nextPendingConnection(); if (!sock) return; connect(sock, &QTcpSocket::readyRead, this, [this, sock]() { const QByteArray request = sock->readAll(); const int line_end = request.indexOf("\r\n"); const QByteArray first_line = (line_end >= 0) ? request.left(line_end) : request; const QList parts = first_line.split(' '); QString token; QString error_msg; if (parts.size() >= 2) { const QUrl url(QStringLiteral("http://localhost") + QString::fromLatin1(parts.at(1))); const QUrlQuery q(url); token = q.queryItemValue("request_token"); if (token.isEmpty()) token = q.queryItemValue("auth_code"); if (token.isEmpty()) { const QString err = q.queryItemValue("error"); error_msg = err.isEmpty() ? QStringLiteral("Token missing in redirect") : err; } } else { error_msg = QStringLiteral("Malformed request"); } const QByteArray body(kResponseHtml); QByteArray response = "HTTP/1.1 200 OK\r\n"; response += "Content-Type: text/html; charset=utf-8\r\n"; response += "Content-Length: " + QByteArray::number(body.size()) + "\r\n"; response += "Connection: close\r\n\r\n"; response += body; sock->write(response); sock->flush(); sock->disconnectFromHost(); connect(sock, &QTcpSocket::disconnected, sock, &QTcpSocket::deleteLater); timeout_timer_->stop(); if (!token.isEmpty()) { LOG_INFO("RedirectServer", "Captured auth token"); server_->close(); emit request_token_received(token); } else { LOG_WARN("RedirectServer", "No token in redirect: " + error_msg); emit error(error_msg); } }); } void RedirectServer::handle_timeout() { LOG_WARN("RedirectServer", "Browser login timed out"); server_->close(); emit timeout(); } } // namespace fincept::trading::auth