adrianbonpin
1ad216b9ff
Add embedSpec: true to openapi config to prevent cached Response body from being consumed on subsequent requests. Also add games-performance routes export and mobile-callback route.
36 lines
1.1 KiB
TypeScript
36 lines
1.1 KiB
TypeScript
import { auth } from "@/lib/auth"
|
|
import { NextRequest } from "next/server"
|
|
|
|
/**
|
|
* Mobile OAuth bridge page.
|
|
*
|
|
* After a social OAuth flow completes in the mobile WebBrowser,
|
|
* Better Auth redirects here with the session cookie set.
|
|
* We extract the session token and redirect to the app's
|
|
* deep link scheme so the mobile app can store the token.
|
|
*/
|
|
export async function GET(request: NextRequest) {
|
|
try {
|
|
const session = await auth.api.getSession({
|
|
headers: request.headers,
|
|
})
|
|
|
|
if (!session) {
|
|
// No session found — redirect to app with error
|
|
const errorUrl = new URL("deckyvault://auth/callback")
|
|
errorUrl.searchParams.set("error", "session_not_found")
|
|
return Response.redirect(errorUrl.toString())
|
|
}
|
|
|
|
const token = session.session.token
|
|
const callbackUrl = new URL("deckyvault://auth/callback")
|
|
callbackUrl.searchParams.set("token", token)
|
|
|
|
return Response.redirect(callbackUrl.toString())
|
|
} catch {
|
|
const errorUrl = new URL("deckyvault://auth/callback")
|
|
errorUrl.searchParams.set("error", "callback_error")
|
|
return Response.redirect(errorUrl.toString())
|
|
}
|
|
}
|