WildDragonLLC/9router
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(oauth): declare searchParams in register-session POST handler

Browse source 
Missing declaration caused a ReferenceError -> 500 HTML response instead
of JSON when clients called POST .../register-session.
This commit is contained in:
alfep 2026-08-05 11:40:51 +07:00 committed by decolua
parent 86131b9ca4
commit 948dd8f89b
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
src/app/api/oauth/[provider]/[action]/route.js
View file

@ -254,6 +254,7 @@ export async function POST(request, { params }) {
if (action === "register-session") { if (action === "register-session") {
// Register proxy session out of URL query (state) + body (codeVerifier). // Register proxy session out of URL query (state) + body (codeVerifier).
// Zed's codeVerifier encodes the RSA private key — must stay out of URL/logs. // Zed's codeVerifier encodes the RSA private key — must stay out of URL/logs.
const searchParams = new URL(request.url).searchParams;
const state = searchParams.get("state") || body?.state; const state = searchParams.get("state") || body?.state;
if (!state) return NextResponse.json({ error: "Missing state" }, { status: 400 }); if (!state) return NextResponse.json({ error: "Missing state" }, { status: 400 });
let ok = false; let ok = false;