File size: 3,787 Bytes
88c4c60 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 | import { NextResponse } from "next/server";
import { createProviderConnection } from "@/models";
import { extractCodexAccountInfo } from "@/lib/oauth/providers";
/**
* POST /api/oauth/codex/bulk-import
* Bulk import multiple codex (OAuth) account JSON objects in one call.
*
* Body accepts any of:
* - Array: [{...}, {...}]
* - Single: {...}
* - Wrapped: { accounts: [{...}, ...] }
*
* Each item must contain at least `accessToken`. Missing email / chatgpt
* account info is best-effort backfilled from the JWT (idToken or accessToken).
*
* Tokens are NEVER echoed back in the response.
*/
export async function POST(request) {
let body;
try {
body = await request.json();
} catch (err) {
return NextResponse.json(
{ error: `Invalid JSON body: ${err.message}` },
{ status: 400 }
);
}
// Normalize to array
let accounts;
if (Array.isArray(body)) {
accounts = body;
} else if (body && typeof body === "object" && Array.isArray(body.accounts)) {
accounts = body.accounts;
} else if (body && typeof body === "object") {
accounts = [body];
} else {
accounts = null;
}
if (!Array.isArray(accounts) || accounts.length === 0) {
return NextResponse.json(
{ error: "No accounts provided" },
{ status: 400 }
);
}
const results = [];
let success = 0;
let failed = 0;
// SERIAL loop — createProviderConnection reads max(priority) and reorders
// inside a transaction. Parallel calls would race on priority assignment.
for (let i = 0; i < accounts.length; i++) {
const raw = accounts[i];
try {
if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
throw new Error("Item is not an object");
}
// Strip server-controlled fields
const {
id: _id,
provider: _provider,
authType: _authType,
createdAt: _createdAt,
updatedAt: _updatedAt,
...item
} = raw;
if (!item.accessToken || typeof item.accessToken !== "string") {
throw new Error("Missing accessToken");
}
// Backfill missing identity fields from JWT claims
const psd = item.providerSpecificData || {};
const needsEmail = !item.email;
const needsAccountId = !psd.chatgptAccountId;
const needsPlanType = !psd.chatgptPlanType;
if (needsEmail || needsAccountId || needsPlanType) {
const info = extractCodexAccountInfo(item.idToken || item.accessToken) || {};
if (needsEmail && info.email) item.email = info.email;
if (needsAccountId && info.chatgptAccountId) {
psd.chatgptAccountId = info.chatgptAccountId;
}
if (needsPlanType && info.chatgptPlanType) {
psd.chatgptPlanType = info.chatgptPlanType;
}
}
if (Object.keys(psd).length > 0) {
item.providerSpecificData = psd;
}
// Compute expiresAt from expiresIn if absent
if (!item.expiresAt && typeof item.expiresIn === "number" && item.expiresIn > 0) {
item.expiresAt = new Date(Date.now() + item.expiresIn * 1000).toISOString();
}
// Defaults aligned with OAuth-completed flow
if (item.testStatus === undefined) item.testStatus = "active";
if (item.isActive === undefined) item.isActive = true;
if (!item.lastRefreshAt) item.lastRefreshAt = new Date().toISOString();
const created = await createProviderConnection({
provider: "codex",
authType: "oauth",
...item,
});
results.push({ index: i, ok: true, id: created.id });
success++;
} catch (e) {
results.push({ index: i, ok: false, error: e.message || "Unknown error" });
failed++;
}
}
return NextResponse.json({ success, failed, results });
}
|