From df9b935329ead81dae39c94bffaad4e548278a25 Mon Sep 17 00:00:00 2001
From: jgor20 <102353650+jgor20@users.noreply.github.com>
Date: Mon, 5 Jan 2026 01:35:48 +0000
Subject: [PATCH] fix(auth): add UTF-8 charset to OAuth callback HTML responses
Ensure proper encoding for international characters in error and success pages
by specifying charset=utf-8 in Content-Type headers and adding meta charset tags.
---
src/auth/oauth.js | 16 ++++++++--------
1 file changed, 8 insertions(+), 8 deletions(-)
diff --git a/src/auth/oauth.js b/src/auth/oauth.js
index 4978030..036292e 100644
--- a/src/auth/oauth.js
+++ b/src/auth/oauth.js
@@ -131,10 +131,10 @@ export function startCallbackServer(expectedState, timeoutMs = 120000) {
const error = url.searchParams.get('error');
if (error) {
- res.writeHead(400, { 'Content-Type': 'text/html' });
+ res.writeHead(400, { 'Content-Type': 'text/html; charset=utf-8' });
res.end(`
- Authentication Failed
+ Authentication Failed
❌ Authentication Failed
Error: ${error}
@@ -148,10 +148,10 @@ export function startCallbackServer(expectedState, timeoutMs = 120000) {
}
if (state !== expectedState) {
- res.writeHead(400, { 'Content-Type': 'text/html' });
+ res.writeHead(400, { 'Content-Type': 'text/html; charset=utf-8' });
res.end(`
- Authentication Failed
+ Authentication Failed
❌ Authentication Failed
State mismatch - possible CSRF attack.
@@ -165,10 +165,10 @@ export function startCallbackServer(expectedState, timeoutMs = 120000) {
}
if (!code) {
- res.writeHead(400, { 'Content-Type': 'text/html' });
+ res.writeHead(400, { 'Content-Type': 'text/html; charset=utf-8' });
res.end(`
- Authentication Failed
+ Authentication Failed
❌ Authentication Failed
No authorization code received.
@@ -182,10 +182,10 @@ export function startCallbackServer(expectedState, timeoutMs = 120000) {
}
// Success!
- res.writeHead(200, { 'Content-Type': 'text/html' });
+ res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
res.end(`
- Authentication Successful
+ Authentication Successful
✅ Authentication Successful!
You can close this window and return to the terminal.