setia/ims
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(auth): return 503 when NEXT_PUBLIC_APP_URL unset for invite redirectTo

Browse Source 
Prevent invite emails from falling back to localhost when NEXT_PUBLIC_APP_URL
is unset in production. Now explicitly checks and rejects with 503.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
admin
2026-07-17 19:03:58 +08:00
co-authored by Claude Sonnet 4.6
parent e682162bbc
commit a3ce59f2a8
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/api/admin/users/route.ts
+7 -1
View File
@@ -60,7 +60,13 @@ export async function POST(request: NextRequest) {
) )
newUserId = created.user.id newUserId = created.user.id
} else { } else {
const appUrl = process.env.NEXT_PUBLIC_APP_URL ?? 'http://localhost:3000' const appUrl = (process.env.NEXT_PUBLIC_APP_URL ?? '').replace(/\/$/, '')
if (!appUrl) {
return NextResponse.json(
{ error: 'Invite unavailable: NEXT_PUBLIC_APP_URL not configured' },
{ status: 503 },
)
}
const { data: invited, error: inviteError } = await admin.auth.admin.inviteUserByEmail(email, { const { data: invited, error: inviteError } = await admin.auth.admin.inviteUserByEmail(email, {
data: { full_name: body.name ?? '' }, data: { full_name: body.name ?? '' },
redirectTo: `${appUrl}/api/auth/callback`, redirectTo: `${appUrl}/api/auth/callback`,