text: #!/usr/bin/env python3
  import sys
  import webbrowser
  from http.server import HTTPServer, BaseHTTPRequestHandler
  from urllib.parse import urlencode, parse_qs
  from tools.lib.api import CommaApi, APIError
  from tools.lib.auth_config import set_token
  
  class ClientRedirectServer(HTTPServer):
    query_params = {}
  
  class ClientRedirectHandler(BaseHTTPRequestHandler):
    def do_GET(self):
      if not self.path.startswith('/auth_redirect'):
        self.send_response(204)
        return
  
      query = self.path.split('?', 1)[-1]
      query = parse_qs(query, keep_blank_values=True)
      self.server.query_params = query
  
      self.send_response(200)
      self.send_header('Content-type', 'text/plain')
      self.end_headers()
      self.wfile.write(b'Return to the CLI to continue')
  
    def log_message(self, format, *args):
      pass  # this prevent http server from dumping messages to stdout
  
  def auth_redirect_link(port):
    redirect_uri = f'http://localhost:{port}/auth_redirect'
    params = {
      'type': 'web_server',
      'client_id': '45471411055-ornt4svd2miog6dnopve7qtmh5mnu6id.apps.googleusercontent.com',
      'redirect_uri': redirect_uri,
      'response_type': 'code',
      'scope': 'https://www.googleapis.com/auth/userinfo.email',
      'prompt': 'select_account',
    }
  
    return (redirect_uri, 'https://accounts.google.com/o/oauth2/auth?' + urlencode(params))
  
  def login():
    port = 9090
    redirect_uri, oauth_uri = auth_redirect_link(port)
  
    web_server = ClientRedirectServer(('localhost', port), ClientRedirectHandler)
    print(f'To sign in, use your browser and navigate to {oauth_uri}')
    webbrowser.open(oauth_uri, new=2)
  
    while True:
      web_server.handle_request()
      if 'code' in web_server.query_params:
        code = web_server.query_params['code']
        break
      elif 'error' in web_server.query_params:
        print('Authentication Error: "%s". Description: "%s" ' % (
          web_server.query_params['error'],
          web_server.query_params.get('error_description')), file=sys.stderr)
        break
  
    try:
      auth_resp = CommaApi().post('v2/auth/', data={'code': code, 'redirect_uri': redirect_uri})
      set_token(auth_resp['access_token'])
      print('Authenticated')
    except APIError as e:
      print(f'Authentication Error: {e}', file=sys.stderr)
  
  if __name__ == '__main__':
    login()
  