nobat724_front/app/api/auth/token/route.js

import { NextResponse } from "next/server";
import { axiosInstance } from "@/lib/req";

export async function POST(request) {
  const { uuid, code, scope = "nobat724" } = await request.json();

  const API_URL = process.env.NEXT_PUBLIC_API_URL;
  const CLIENT_ID = process.env.CLIENT_ID || process.env.NEXT_PUBLIC_CLIENT_ID;
  const CLIENT_SECRET = process.env.CLIENT_SECRET || process.env.NEXT_PUBLIC_CLIENT_SECRET;

  if (!uuid || !code) {
    return NextResponse.json({ error: "uuid and code are required" }, { status: 400 });
  }

  const formData = new URLSearchParams();
  formData.append("grant_type", "mobile");
  formData.append("client_id", CLIENT_ID);
  formData.append("client_secret", CLIENT_SECRET);
  formData.append("uuid", uuid);
  formData.append("code", code);
  formData.append("scope", scope);

  try {
    const res = await axiosInstance.post(
      `${API_URL}/oauth/token`,
      formData.toString(),
      {
        headers: { "Content-Type": "application/x-www-form-urlencoded", Authorization: "" },
      }
    );
    return NextResponse.json(res.data, { status: res.status });
  } catch (error) {
    if (error.response) {
      return NextResponse.json(error.response.data, { status: error.response.status });
    }
    return NextResponse.json({ error: "Token request failed" }, { status: 500 });
  }
}