Function getSignInCallbackUrl

apps/web/src/lib/getSignInCallbackUrl.ts:73–117

(searchParams?: NextAppSearchParams)

}

export default function getSignInCallbackUrl(searchParams?: NextAppSearchParams): string {
  const callbackParams = new URLSearchParams();

  if (typeof searchParams?.source === 'string' && searchParams?.source) {
    callbackParams.set('source', searchParams?.source);
  }

  // Order matters: tests assert this exact emission order through the
  // sign-in callback redirect (see getSignInCallbackUrl.test.ts).
  const trackingParams = [
    'im_ref',
    '_saasquatch',
    'rsCode',
    'rsShareMedium',
    'rsEngagementMedium',
    'utm_source',
    'utm_medium',
    'utm_campaign',
    'utm_term',
    'utm_content',
  ] as const;
  for (const trackingParam of trackingParams) {
    const value = searchParams?.[trackingParam];
    if (typeof value === 'string' && value) {
      callbackParams.set(trackingParam, value);
    }
  }

  // Always route through /users/after-sign-in to ensure stytch verification check
  if (
    typeof searchParams?.callbackPath === 'string' &&
    isValidCallbackPath(searchParams.callbackPath)
  ) {
    callbackParams.set('callbackPath', searchParams.callbackPath);
  }

  // Preserve signup=true so an OAuth error bounce (see parseSignInRedirectContext
  // in user.server.ts) can send the user back to the create-account UI instead
  // of the plain sign-in UI.
  if (searchParams?.signup === 'true') {
    callbackParams.set('signup', 'true');
  }

  return `/users/after-sign-in${callbackParams.size > 0 ? `?${callbackParams.toString()}` : ''}`;
}