Function loader

apps/webapp/app/routes/oauth2.callback.ts:20–84

({ request }: LoaderFunctionArgs)

  .passthrough();

export async function loader({ request }: LoaderFunctionArgs) {
  if (request.method.toUpperCase() !== "GET") {
    return { status: 405, body: "Method Not Allowed" };
  }

  const url = requestUrl(request);

  const parsedParams = ParamsSchema.safeParse(Object.fromEntries(url.searchParams));

  if (!parsedParams.success) {
    // TODO: this should redirect to the integrations page (need to lookup orgid in cookie)
    throw new Response("Invalid params", { status: 400 });
  }

  if (parsedParams.data.error) {
    // TODO: this should redirect to the integrations page (need to lookup orgid in cookie)
    throw new Response(parsedParams.data.error, { status: 400 });
  }

  if (!parsedParams.data.code || !parsedParams.data.state) {
    throw new Response("Invalid params", { status: 400 });
  }

  const attempt = await prisma.connectionAttempt.findUnique({
    where: {
      id: parsedParams.data.state,
    },
    include: {
      integration: {
        include: {
          customClientReference: true,
        },
      },
    },
  });

  if (!attempt) {
    throw new Response("Invalid attempt", { status: 400 });
  }

  let customOAuthClient: OAuthClient | undefined;
  if (attempt.integration.customClientReference) {
    const secretStore = getSecretStore(env.SECRET_STORE);
    customOAuthClient = await secretStore.getSecret(
      OAuthClientSchema,
      attempt.integration.customClientReference.key
    );
  }

  try {
    await integrationAuthRepository.createConnectionFromAttempt({
      attempt,
      code: parsedParams.data.code,
      url,
      customOAuthClient,
    });

    return redirect(attempt.redirectTo);