Allow to set redirect_uri when logging-in thru GitHub (uses OST_GITHUB_CALLBACK_URL)

.changeset/rare-onions-roll.md

@@ -0,0 +1,5 @@
+---
+"outstatic": patch
+---
+
+Allow to set redirect_uri when logging-in thru GitHub (uses OST_GITHUB_CALLBACK_URL)

packages/outstatic/src/app/api/auth/callback.ts

@@ -1,7 +1,7 @@
-import { NextRequest, NextResponse } from 'next/server'
 import { createEdgeRouter } from 'next-connect'
 import nextSession from 'next-session'
 import { Session } from 'next-session/lib/types'
+import { NextRequest, NextResponse } from 'next/server'
 import { setLoginSession } from '../../../utils/auth/auth'
 import { MAX_AGE } from '../../../utils/auth/auth-cookies'
 
@@ -100,6 +100,13 @@ router
     }
   })
   .get(async (req) => {
+    const error = req?.nextUrl.searchParams?.get('error')
+
+    // check for GitHub errors
+    if (error) {
+      return NextResponse.json({ error }, { status: 403 })
+    }
+
     const code = req?.nextUrl.searchParams?.get('code') as string
     const access_token = await getAccessToken(code)
     req.session.token = access_token

packages/outstatic/src/app/api/auth/login.ts

@@ -8,6 +8,9 @@ export default async function GET() {
   url.searchParams.append('client_id', process.env.OST_GITHUB_ID ?? '')
   url.searchParams.append('scope', scopes.join(','))
   url.searchParams.append('response_type', 'code')
+  if (process.env?.OST_GITHUB_CALLBACK_URL) {
+    url.searchParams.append('redirect_uri', process.env.OST_GITHUB_CALLBACK_URL)
+  }
 
   redirect(url.toString())
 }

packages/outstatic/src/utils/errors/loginErrors.tsx

@@ -27,6 +27,22 @@ const loginErrors = {
       </a>
       .
     </>
+  ),
+  redirect_uri_mismatch: (
+    <>
+      The redirect_uri MUST match the registered callback URL for this
+      application. <br />
+      <br />
+      For more information:{' '}
+      <a
+        className="underline"
+        target="_blank"
+        href="https://docs.github.com/apps/managing-oauth-apps/troubleshooting-authorization-request-errors/#redirect-uri-mismatch"
+      >
+        GitHub Apps troubleshooting
+      </a>
+      .
+    </>
   )
 }
 

turbo.json

@@ -43,7 +43,8 @@
         "OST_REPO_OWNER",
         "OST_TOKEN_SECRET",
         "VERCEL_GIT_REPO_SLUG",
-        "OPENAI_API_KEY"
+        "OPENAI_API_KEY",
+        "OST_GITHUB_CALLBACK_URL"
       ]
     }
   }