ypdated app.py

app.py

@@ -44,8 +44,16 @@ def start_http_server():
     httpd.serve_forever()
 
 def login():
-    auth_url = f"{AUTH_URL}?client_id={CLIENT_ID}&response_type=code&redirect_uri={REDIRECT_URI}&scope={SCOPE}"
-    webbrowser.open(auth_url)
+    params = {
+        'client_id': CLIENT_ID,
+        'response_type': 'code',
+        'redirect_uri': REDIRECT_URI,
+        'response_mode': 'query',
+        'scope': SCOPE,
+        'state': 'random_state_string'  # Optional: Use for security
+    }
+    login_url = f"{AUTH_URL}?{urlencode(params)}"
+    return login_url
 
 def check_login():
     return "You are logged in!" if access_token else "You are not logged in."