// SPDX-License-Identifier: LicenseRef-ConusAI-Template-1.0
// GET /auth/callback: the provider sends the browser back here (MIB I3's path). The code is
// exchanged on the server, the tokens are sealed into the session row, and the browser receives
// one sealed cookie whose plaintext is a random handle. A failure of any step ends at the sign-in
// page with a code for the person to read, never at a 500 (src/server/auth-response.ts).
import { authRoutes } from "../../../src/server/app"
import { authResponse } from "../../../src/server/auth-response"

export const dynamic = "force-dynamic"
export const runtime = "nodejs"

export async function GET(request: Request): Promise<Response> {
  return authResponse(request, async () => (await authRoutes()).callback(request))
}