ConusAI vendor v0.1.0-dev.20261027+9b1131fb

apps/web/app/auth/callback/route.ts

@@ -0,0 +1,14 @@
+// SPDX-License-Identifier: LicenseRef-ConusAI-Template-1.0
+// GET /auth/callback: the provider sends the browser back here (MIB I3's path). The code is
+// exchanged on the server, the tokens are sealed into the session row, and the browser receives
+// one sealed cookie whose plaintext is a random handle. A failure of any step ends at the sign-in
+// page with a code for the person to read, never at a 500 (src/server/auth-response.ts).
+import { authRoutes } from "../../../src/server/app"
+import { authResponse } from "../../../src/server/auth-response"
+
+export const dynamic = "force-dynamic"
+export const runtime = "nodejs"
+
+export async function GET(request: Request): Promise<Response> {
+  return authResponse(request, async () => (await authRoutes()).callback(request))
+}