VSCode SFDX: Authorize an Org fails with EACCES error

Summary

SFDX: Authorize an Org fails with EACCES error.

Steps To Reproduce:

1. Open VS code with no project
2. Issue command SFDX: Create Project
3. Name the project VSCodeQuickstart (for instance)
4. In file project-scratch-def.json change orgName to Learning VS Code
5. Issue command SFDX: Authorize an Org
6. Accept default login URL
7. Enter alias VS Code Playground (for instance)

Expected result

Browser window should open to authorize access.

Actual result

Browser does not open. Instead, the Output panel reads:

Starting SFDX: Authorize an Org

11:38:21.734 sfdx force:auth:web:login --setalias vscodeOrg --instanceurl https://login.salesforce.com --setdefaultusername
{ Error: listen EACCES: permission denied 127.0.0.1:1717
    at Server.setupListenHandle [as _listen2] (net.js:1253:19)
    at listenInCluster (net.js:1318:12)
    at GetAddrInfoReqWrap.doListen [as callback] (net.js:1451:7)
    at GetAddrInfoReqWrap.onlookup [as oncomplete] (dns.js:61:10)
  code: 'EACCES',
  errno: 'EACCES',
  syscall: 'listen',
  address: '127.0.0.1',
  port: 1717 }
{ Error: listen EACCES: permission denied 127.0.0.1:1717
    at Server.setupListenHandle [as _listen2] (net.js:1253:19)
    at listenInCluster (net.js:1318:12)
    at GetAddrInfoReqWrap.doListen [as callback] (net.js:1451:7)
    at GetAddrInfoReqWrap.onlookup [as oncomplete] (dns.js:61:10)
  code: 'EACCES',
  errno: 'EACCES',
  syscall: 'listen',
  address: '127.0.0.1',
  port: 1717 }
{ Error: listen EACCES: permission denied 127.0.0.1:1717
    at Server.setupListenHandle [as _listen2] (net.js:1253:19)
    at listenInCluster (net.js:1318:12)
    at GetAddrInfoReqWrap.doListen [as callback] (net.js:1451:7)
    at GetAddrInfoReqWrap.onlookup [as oncomplete] (dns.js:61:10)
  code: 'EACCES',
  errno: 'EACCES',
  syscall: 'listen',
  address: '127.0.0.1',
  port: 1717 }
{ Error: listen EACCES: permission denied 127.0.0.1:1717
    at Server.setupListenHandle [as _listen2] (net.js:1253:19)
    at listenInCluster (net.js:1318:12)
    at GetAddrInfoReqWrap.doListen [as callback] (net.js:1451:7)
    at GetAddrInfoReqWrap.onlookup [as oncomplete] (dns.js:61:10)
  code: 'EACCES',
  errno: 'EACCES',
  syscall: 'listen',
  address: '127.0.0.1',
  port: 1717 }
11:38:23.839 sfdx force:auth:web:login --setalias vscodeOrg --instanceurl https://login.salesforce.com --setdefaultusername ended with exit code 0

Additional information

• Tried this over two different networks.
• First as normal user, then as admin.

VS Code Version: 1.33.1

SFDX CLI Version: sfdx-cli/7.5.0-e6ca93eee8 win32-x64 node-v10.15.3

OS and version: Windows 10 (Windows_NT x64 10.0.17763)

[rendall]

There is one final piece to the puzzle, and it definitely is a bug. The oauthLocalPort is ignored at callback, and it uses the 1717 port.

To reproduce:

• set oauthLocalPort to anything working not 1717
• type the command sfdx force:auth:web:login -d -a DevHub
• authorize at the login screen
• note that the redirect is to http://localhost:1717/OauthRedirect?code=aPrxrDqe....

This redirect should be to the oauthLocalPort set in sfdx-project.json

The workaround is to replace the 1717 in the browser url with the alternate port.

[DFKA]

An alternative approach that seems to work is to restart in safe mode with networking enabled and add 1717 to your own range, and then restart back to normal.

netsh interface ip add excludedportrange protocol=tcp startport=1717 numberofports=1