Function GET

app/api/auth/github/callback/route.ts:11–104

(request: NextRequest)

 * 转发给后端 API 完成认证,然后重定向到前端
 */
export async function GET(request: NextRequest) {
  const searchParams = request.nextUrl.searchParams;
  const code = searchParams.get('code');
  const state = searchParams.get('state');
  const error = searchParams.get('error');

  // 如果有错误,重定向到登录页并显示错误
  if (error) {
    return NextResponse.redirect(
      new URL(`/auth?error=${encodeURIComponent(error)}`, FRONTEND_URL)
    );
  }

  // 如果缺少必要参数,返回错误
  if (!code || !state) {
    return NextResponse.redirect(
      new URL('/auth?error=missing_oauth_params', FRONTEND_URL)
    );
  }

  try {
    // 调用后端 API 完成 GitHub OAuth 流程
    const response = await fetch(
      `${API_BASE_URL}/api/auth/github/callback`,
      {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
        },
        body: JSON.stringify({ code, state }),
      }
    );

    if (!response.ok) {
      const errorData = await response.json().catch(() => ({}));
      const errorMessage = errorData.detail || 'GitHub 认证失败';
      throw new Error(errorMessage);
    }

    const data = await response.json();
    const { access_token, refresh_token, expires_in, user } = data;

    // 创建重定向 URL,包含用户信息用于 localStorage 同步
    const redirectUrl = new URL('/dashboard', FRONTEND_URL);
    redirectUrl.searchParams.set('login', 'success');
    redirectUrl.searchParams.set('token', access_token);
    redirectUrl.searchParams.set('user', encodeURIComponent(JSON.stringify(user)));
    
    // 添加 refresh_token 和 expires_in 参数
    if (refresh_token) {
      redirectUrl.searchParams.set('refresh_token', refresh_token);
    }
    if (expires_in) {
      redirectUrl.searchParams.set('expires_in', String(expires_in));
    }

    const redirectResponse = NextResponse.redirect(redirectUrl);