feat: tauri-plugin-http for GitHub Device Flow — bypasses CORS on iOS

Author: BunsDev

lib/github-api.ts

@@ -94,8 +94,18 @@ export interface DeviceCodeResponse {
   interval: number
 }
 
+/** Use Tauri HTTP plugin (bypasses CORS) when available, otherwise browser fetch */
+async function nativeFetch(url: string, init: RequestInit): Promise<Response> {
+  try {
+    const { fetch: tauriFetch } = await import('@tauri-apps/plugin-http')
+    return await tauriFetch(url, init)
+  } catch {
+    return fetch(url, init)
+  }
+}
+
 export async function startDeviceFlow(): Promise<DeviceCodeResponse> {
-  const res = await fetch('https://github.com/login/device/code', {
+  const res = await nativeFetch('https://github.com/login/device/code', {
     method: 'POST',
     headers: {
       Accept: 'application/json',
@@ -119,7 +129,7 @@ export async function pollDeviceFlow(
   for (let i = 0; i < 60; i++) {
     if (signal?.aborted) throw new Error('Cancelled')
     await delay(interval * 1000)
-    const res = await fetch('https://github.com/login/oauth/access_token', {
+    const res = await nativeFetch('https://github.com/login/oauth/access_token', {
       method: 'POST',
       headers: {
         Accept: 'application/json',

package.json

@@ -48,6 +48,7 @@
     "@tauri-apps/api": "^2.10.1",
     "@tauri-apps/plugin-clipboard-manager": "^2.3.2",
     "@tauri-apps/plugin-dialog": "^2.6.0",
+    "@tauri-apps/plugin-http": "^2.5.7",
     "@tauri-apps/plugin-shell": "^2.3.5",
     "@tauri-apps/plugin-window-state": "^2.4.1",
     "@types/dompurify": "^3.2.0",