Function getImpactTrackingContextFromAuthFlow

apps/web/src/lib/user/server.ts:409–488

(requestHeaders?: Headers)

    google_user_image_url: user.image || '',
    hosted_domain,
    provider: account.provider,
    provider_account_id: user.email,
    display_name: null,
  };
}

function createAccountInfo(
  account: Account,
  user: NextUser | AdapterUser,
  profile: Profile | undefined
): CreateOrUpdateUserArgs {
  const accountInfo =
    createGoogleAccountInfo(account, user, profile) ??
    createAnacondaAccountInfo(account, user) ??
    createAppleAccountInfo(account, user) ??
    createGitHubAccountInfo(account, user, profile) ??
    createGitlabAccountInfo(account, user) ??
    createLinkedInAccountInfo(account, user) ??
    createDiscordAccountInfo(account, user) ??
    createEmailAccountInfo(account, user) ??
    createFakeAccountInfo(account, user) ??
    createSSOAccountInfo(account, user, profile);

  if (!accountInfo) {
    throw new Error(`Unsupported provider: ${account.provider}`);
  }

  return accountInfo;
}

export type SignInRedirectContext = {
  callbackPath?: string;
  signup?: boolean;
};

/**
 * Extracts the sign-in redirect context from the NextAuth callback-url cookie
 * value. Exported so the parsing logic can be tested without mocking the
 * next/headers cookie store.
 *
 * The NextAuth callback-url cookie holds the post-auth destination, e.g.
 * `/users/after-sign-in?callbackPath=/device-auth?code=<CODE>`. We lift
 * `callbackPath` and `signup` out so that bouncing back to `/users/sign_in`
 * on an auth error preserves the mobile device-auth context and the signup
 * UI mode the user originally requested.
 */
export function parseSignInRedirectContext(
  callbackUrlCookieValue: string | undefined
): SignInRedirectContext {
  if (!callbackUrlCookieValue) return {};

  let callbackUrl: URL;
  try {
    callbackUrl = new URL(callbackUrlCookieValue, 'http://localhost');
  } catch {
    return {};
  }