96 lines
2.7 KiB
TypeScript
96 lines
2.7 KiB
TypeScript
import { NextRequest, NextResponse } from "next/server"
|
|
import { AuthError } from "next-auth"
|
|
|
|
import { Lang } from "@/constants/languages"
|
|
import { login } from "@/constants/routes/handleAuth"
|
|
import { env } from "@/env/server"
|
|
import { badRequest, internalServerError } from "@/server/errors/next"
|
|
|
|
import { signIn } from "@/auth"
|
|
|
|
export async function GET(
|
|
request: NextRequest,
|
|
context: { params: { lang: Lang } }
|
|
) {
|
|
if (!env.PUBLIC_URL) {
|
|
throw internalServerError("No value for env.PUBLIC_URL")
|
|
}
|
|
|
|
const loginKey = request.nextUrl.searchParams.get("loginKey")
|
|
if (!loginKey) {
|
|
console.log(
|
|
`[verifymagiclink] missing required loginKey, aborting bad request`
|
|
)
|
|
return badRequest()
|
|
}
|
|
|
|
let redirectTo: string
|
|
|
|
console.log(`[verifymagiclink] verifying callback`)
|
|
|
|
const redirectToCookieValue = request.cookies.get(
|
|
"magicLinkRedirectTo"
|
|
)?.value // Set redirect url from the magicLinkRedirect Cookie which is set when intiating login
|
|
const redirectToFallback = "/"
|
|
|
|
console.log(
|
|
`[verifymagiclink] magicLinkRedirectTo cookie value: ${redirectToCookieValue}`
|
|
)
|
|
|
|
redirectTo = redirectToCookieValue || redirectToFallback
|
|
|
|
// Make relative URL to absolute URL
|
|
if (redirectTo.startsWith("/")) {
|
|
console.log(
|
|
`[verifymagiclink] make redirectTo absolute, from ${redirectTo}`
|
|
)
|
|
redirectTo = new URL(redirectTo, env.PUBLIC_URL).href
|
|
console.log(`[verifymagiclink] make redirectTo absolute, to ${redirectTo}`)
|
|
}
|
|
|
|
// Update Seamless login url as Magic link login has a different authenticator in Curity
|
|
redirectTo = redirectTo.replace("updatelogin", "updateloginemail")
|
|
|
|
try {
|
|
console.log(`[verifymagiclink] final redirectUrl: ${redirectTo}`)
|
|
|
|
/**
|
|
* Passing `redirect: false` to `signIn` will return the URL instead of
|
|
* automatically redirecting to it inside of `signIn`.
|
|
* https://github.com/nextauthjs/next-auth/blob/3c035ec/packages/next-auth/src/lib/actions.ts#L76
|
|
*/
|
|
const redirectUrl = await signIn(
|
|
"curity",
|
|
{
|
|
redirectTo,
|
|
redirect: false,
|
|
},
|
|
{
|
|
ui_locales: context.params.lang,
|
|
scope: ["openid", "profile"].join(" "),
|
|
loginKey: loginKey,
|
|
for_origin: env.PUBLIC_URL,
|
|
acr_values: "abc",
|
|
version: "2",
|
|
}
|
|
)
|
|
|
|
if (redirectUrl) {
|
|
console.log(`[verifymagiclink] redirecting to: ${redirectUrl}`)
|
|
return NextResponse.redirect(redirectUrl)
|
|
} else {
|
|
console.error(
|
|
`[verifymagiclink] missing redirectUrl reponse from signIn()`
|
|
)
|
|
}
|
|
} catch (error) {
|
|
if (error instanceof AuthError) {
|
|
console.error({ signInAuthError: error })
|
|
} else {
|
|
console.error({ signInError: error })
|
|
}
|
|
}
|
|
|
|
return internalServerError()
|
|
}
|