33 lines
1017 B
TypeScript
33 lines
1017 B
TypeScript
import { NextRequest, NextResponse } from "next/server";
|
|
|
|
const COOKIE_NAME = "pb_session";
|
|
const COOKIE_MAX_AGE = 60 * 60 * 24 * 365; // 365 天，登录态持续有效直至用户主动退出
|
|
const COOKIE_DOMAIN = process.env.AUTH_COOKIE_DOMAIN || ".hackrobot.cn";
|
|
|
|
export async function POST(request: NextRequest) {
|
|
const body = await request.json().catch(() => ({}));
|
|
const token = body?.token;
|
|
const record = body?.record;
|
|
if (!token || !record?.id) {
|
|
return NextResponse.json({ ok: false, error: "缺少 token 或 record" }, { status: 400 });
|
|
}
|
|
|
|
const payload = JSON.stringify({
|
|
token,
|
|
userId: record.id,
|
|
email: record.email ?? "",
|
|
});
|
|
const encoded = Buffer.from(payload, "utf-8").toString("base64url");
|
|
|
|
const res = NextResponse.json({ ok: true });
|
|
res.cookies.set(COOKIE_NAME, encoded, {
|
|
domain: COOKIE_DOMAIN,
|
|
path: "/",
|
|
maxAge: COOKIE_MAX_AGE,
|
|
secure: process.env.NODE_ENV === "production",
|
|
sameSite: "lax",
|
|
httpOnly: true,
|
|
});
|
|
return res;
|
|
}
|