Method discourseCallback

internal/panel/handler.go:493–521

(w http.ResponseWriter, r *http.Request)

}

func (h *Handler) discourseCallback(w http.ResponseWriter, r *http.Request) {
	if !h.discourse.Enabled() {
		http.Redirect(w, r, "/login", http.StatusFound)
		return
	}
	rawSSO := r.URL.Query().Get("sso")
	sig := r.URL.Query().Get("sig")
	username, err := h.discourse.ParseCallback(rawSSO, sig)
	if err != nil {
		http.Redirect(w, r, "/login?error=1", http.StatusFound)
		return
	}
	if !h.discourse.IsAllowed(username) {
		http.Redirect(w, r, "/login?error=1", http.StatusFound)
		return
	}
	token, err := h.auth.CreateSession(username)
	if err != nil {
		http.Error(w, "创建 session 失败", http.StatusInternalServerError)
		return
	}
	setSessionCookie(w, token)
	if cookie, cErr := r.Cookie("discourse_spa"); cErr == nil && cookie.Value == "1" {
		http.SetCookie(w, &http.Cookie{Name: "discourse_spa", Value: "", Path: "/", MaxAge: -1})
		http.Redirect(w, r, "/login#discourse_token="+token, http.StatusFound)
		return
	}
	http.Redirect(w, r, "/dashboard", http.StatusFound)
}

// ─── 节点管理 ─────────────────────────────────────────────────────────────────