redirect on OIDC return

Author: dvoytenko

app/callback/route.ts

@@ -1,5 +1,7 @@
 import { cookies as getCookies } from "next/headers";
 import { getTokens } from "../issuer";
+import { createSession } from "@/app/dashboard/auth";
+import { redirect } from "next/navigation";
 
 export async function GET(req: Request) {
   const url = req.url;
@@ -12,11 +14,44 @@ export async function GET(req: Request) {
   console.log("Callback:", { url, expectedState });
 
   const { id_token, claims } = (await getTokens(url, expectedState)) || {};
+  console.log("OIDC Callback:", { id_token, claims, v_deeplink });
 
   if (id_token) {
-    cookies.set("id-token", id_token);
+    createSession(id_token);
   }
 
-  // TODO: redirect to the /dashboard based on v_deeplink.
-  return Response.json({ id_token, claims, v_deeplink });
+  const deepLinkParams = new URLSearchParams(v_deeplink || "");
+
+  const resourceId = deepLinkParams.get("resource_id");
+  const projectId = deepLinkParams.get("project_id");
+  const invoiceId = deepLinkParams.get("invoice_id");
+  const checkId = deepLinkParams.get("check_id");
+
+  if (invoiceId) {
+    return redirect(`/dashboard/invoices?id=${invoiceId}`);
+  }
+
+  if (deepLinkParams.get("support")) {
+    return redirect(
+      `/dashboard/support${resourceId ? "?resource_id=" + resourceId : ""}`
+    );
+  }
+
+  if (resourceId) {
+    if (projectId) {
+      if (checkId) {
+        return redirect(
+          `/dashboard/resources/${resourceId}/projects/${projectId}?checkId=${encodeURIComponent(checkId)}`
+        );
+      }
+
+      return redirect(
+        `/dashboard/resources/${resourceId}/projects/${projectId}`
+      );
+    }
+
+    return redirect(`/dashboard/resources/${resourceId}`);
+  }
+
+  redirect("/dashboard");
 }

app/login/vercel/callback/route.ts

@@ -102,7 +102,7 @@ export async function createCheck(
     method: "POST",
     installationId: installation_id,
     data: {
-      source: { kind: 'integration', externalResourceId: resource_id },
+      source: { kind: "integration", externalResourceId: resource_id },
       name,
       isRerequestable: isRerequestable === "on",
       requires,
@@ -119,17 +119,26 @@ export async function updateCheckRun(
   deploymentId: string,
   updates: {
     status: "queued" | "running" | "completed";
-    conclusion?: "canceled" | "skipped" | "timeout" | "failed" | "neutral" | "succeeded";
+    conclusion?:
+      | "canceled"
+      | "skipped"
+      | "timeout"
+      | "failed"
+      | "neutral"
+      | "succeeded";
     externalId?: string;
     externalUrl?: string;
     output?: unknown;
   }
 ) {
-  await fetchVercelApi(`/v2/deployments/${deploymentId}/check-runs/${checkRunId}`, {
-    method: "PATCH",
-    installationId: installation_id,
-    data: updates,
-  });
+  await fetchVercelApi(
+    `/v2/deployments/${deploymentId}/check-runs/${checkRunId}`,
+    {
+      method: "PATCH",
+      installationId: installation_id,
+      data: updates,
+    }
+  );
 }
 
 export async function getProjectChecks(
@@ -168,29 +177,6 @@ export async function updateSecrets(
   );
 }
 
-const IntegrationsSsoTokenResponse = z.object({
-  id_token: z.string(),
-});
-
-export async function exchangeCodeForToken(
-  code: string,
-  state: string | null | undefined
-): Promise<string> {
-  const { id_token } = IntegrationsSsoTokenResponse.parse(
-    await fetchVercelApi("/v1/integrations/sso/token", {
-      method: "POST",
-      data: {
-        code,
-        state,
-        client_id: env.INTEGRATION_CLIENT_ID,
-        client_secret: env.INTEGRATION_CLIENT_SECRET,
-      },
-    })
-  );
-
-  return id_token;
-}
-
 export async function importResource(
   installationId: string,
   resourceId: string,