prowler/ui/app/api/auth/callback/saml/route.ts

"use server";

import { NextResponse } from "next/server";

import { signIn } from "@/auth.config";
import { apiBaseUrl, baseUrl } from "@/lib/helper";

export async function GET(req: Request) {
  const { searchParams } = new URL(req.url);
  const id = searchParams.get("id");

  if (!id) {
    return NextResponse.json(
      { error: "ID parameter is missing" },
      { status: 400 },
    );
  }

  try {
    const response = await fetch(`${apiBaseUrl}/tokens/saml?id=${id}`, {
      method: "POST",
      headers: {
        "Content-Type": "application/vnd.api+json",
        Accept: "application/vnd.api+json",
      },
    });

    if (!response.ok) {
      throw new Error(`Failed to fetch tokens: ${response.statusText}`);
    }

    const tokenData = await response.json();
    const { access, refresh } = tokenData.data;

    if (!access || !refresh) {
      throw new Error("Tokens not found in response");
    }

    const result = await signIn("social-oauth", {
      accessToken: access,
      refreshToken: refresh,
      redirect: false,
      callbackUrl: `${baseUrl}/`,
    });

    if (result?.error) {
      throw new Error(result.error);
    }

    return NextResponse.redirect(new URL("/", baseUrl));
  } catch (error) {
    console.error("SAML authentication failed:", error);
    return NextResponse.redirect(new URL("/sign-in", baseUrl));
  }
}