services/session: Keep listening for message events until we find one with code and state

This should ensure that `message` events from noisy browser extensions are ignored and don't block our login flow.

Author: Turbo87

app/services/session.js

@@ -79,14 +79,8 @@ export default class SessionService extends Service {
     }
 
     win.close();
-    if (event.origin !== window.location.origin || !event.data) {
-      return;
-    }
 
-    let { code, state } = event.data;
-    if (!code || !state) {
-      return;
-    }
+    let { code, state } = event;
 
     let response = await fetch(`/api/private/session/authorize?code=${code}&state=${state}`);
     if (!response.ok) {
@@ -112,7 +106,20 @@ export default class SessionService extends Service {
   });
 
   windowEventWatcherTask = task(async () => {
-    return await waitForEvent(window, 'message');
+    // eslint-disable-next-line no-constant-condition
+    while (true) {
+      let event = await waitForEvent(window, 'message');
+      if (event.origin !== window.location.origin || !event.data) {
+        continue;
+      }
+
+      let { code, state } = event.data;
+      if (!code || !state) {
+        continue;
+      }
+
+      return { code, state };
+    }
   });
 
   windowCloseWatcherTask = task(async window => {