hamedandClaude Sonnet 4.6
1aa9f82d2a
- Fix GPS map links always sending literal "latitude"/"longitude" strings instead of actual coordinates in openLocation/Content.js - Add api.clinic-pro.ir to next.config.js remotePatterns so production images load correctly - Fix appointment page: await params and getStateInfo (Next.js 15 pattern) - Enable 401 handling in api.js: clear cookies and redirect to /login - Move OAuth client_secret to server-side API routes (/api/auth/token, /api/auth/refresh) so it is never bundled into client-side JavaScript - Update SendReq, SubmitData, ButtonSendData to call API routes instead of directly sending client_secret from the browser - Update docker-compose.yml to use server-only CLIENT_SECRET env var - Remove debug console.log from clinic doctors list component Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
34 lines
1.2 KiB
JavaScript
34 lines
1.2 KiB
JavaScript
import { NextResponse } from "next/server";
|
|
|
|
export async function POST(request) {
|
|
const { uuid, code, scope = "nobat724" } = await request.json();
|
|
|
|
const API_URL = process.env.NEXT_PUBLIC_API_URL;
|
|
const CLIENT_ID = process.env.CLIENT_ID || process.env.NEXT_PUBLIC_CLIENT_ID;
|
|
const CLIENT_SECRET = process.env.CLIENT_SECRET || process.env.NEXT_PUBLIC_CLIENT_SECRET;
|
|
|
|
if (!uuid || !code) {
|
|
return NextResponse.json({ error: "uuid and code are required" }, { status: 400 });
|
|
}
|
|
|
|
const formData = new URLSearchParams();
|
|
formData.append("grant_type", "mobile");
|
|
formData.append("client_id", CLIENT_ID);
|
|
formData.append("client_secret", CLIENT_SECRET);
|
|
formData.append("uuid", uuid);
|
|
formData.append("code", code);
|
|
formData.append("scope", scope);
|
|
|
|
try {
|
|
const res = await fetch(`${API_URL}/oauth/token`, {
|
|
method: "POST",
|
|
headers: { "Content-Type": "application/x-www-form-urlencoded", Authorization: "" },
|
|
body: formData.toString(),
|
|
});
|
|
const data = await res.json();
|
|
return NextResponse.json(data, { status: res.status });
|
|
} catch {
|
|
return NextResponse.json({ error: "Token request failed" }, { status: 500 });
|
|
}
|
|
}
|