velocitatem/cvfs
1
0
Fork 0
mirror of https://github.com/velocitatem/cvfs.git synced 2026-05-31 08:43:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

redirect using public base url

Browse Source
This commit is contained in:
Daniel Rosel
2026-04-03 19:15:37 +02:00
parent 531c27b669
commit dce592c086
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
apps/webapp/src/app/api/auth/callback/route.ts
View File

@@ -19,12 +19,13 @@ export async function GET(req: NextRequest) {
const issuerRaw = process.env.AUTHENTIK_ISSUER; const issuerRaw = process.env.AUTHENTIK_ISSUER;
const clientId = process.env.AUTHENTIK_CLIENT_ID; const clientId = process.env.AUTHENTIK_CLIENT_ID;
const clientSecret = process.env.AUTHENTIK_CLIENT_SECRET; const clientSecret = process.env.AUTHENTIK_CLIENT_SECRET;
const redirectUri = `${process.env.NEXT_PUBLIC_BASE_URL ?? origin}/api/auth/callback`; const publicBase = process.env.NEXT_PUBLIC_BASE_URL ?? origin;
const redirectUri = `${publicBase}/api/auth/callback`;
const authentikHost = authentikBase(issuerRaw); const authentikHost = authentikBase(issuerRaw);
if (!authentikHost || !clientId || !clientSecret) { if (!authentikHost || !clientId || !clientSecret) {
return NextResponse.redirect(`${origin}/login?error=oidc_not_configured`); return NextResponse.redirect(`${publicBase}/login?error=oidc_not_configured`);
} }
const tokenRes = await fetch(`${authentikHost}/application/o/token/`, { const tokenRes = await fetch(`${authentikHost}/application/o/token/`, {
@@ -39,7 +40,7 @@ export async function GET(req: NextRequest) {
if (!tokenRes?.ok) return NextResponse.redirect(`${origin}/login?error=token_exchange`); if (!tokenRes?.ok) return NextResponse.redirect(`${origin}/login?error=token_exchange`);
const tokens = await tokenRes.json(); const tokens = await tokenRes.json();
const res = NextResponse.redirect(`${origin}/dashboard`); const res = NextResponse.redirect(`${publicBase}/dashboard`);
res.cookies.set('oidc_token', tokens.access_token, { res.cookies.set('oidc_token', tokens.access_token, {
httpOnly: true, sameSite: 'lax', path: '/', httpOnly: true, sameSite: 'lax', path: '/',
maxAge: tokens.expires_in ?? 3600, maxAge: tokens.expires_in ?? 3600,