fix:删除错误配置的代码

This commit is contained in:
2026-06-12 16:43:29 +08:00
parent b36bb2c36b
commit ea339bf621
-8
View File
@@ -30,9 +30,6 @@ const handler = NextAuth({
clientSecret: process.env.AUTH_FACEBOOK_SECRET ?? "", clientSecret: process.env.AUTH_FACEBOOK_SECRET ?? "",
}), }),
], ],
pages: {
signIn: "/auth",
},
// 把 OAuth provider 的 token 塞进 NextAuth session,供前端取用: // 把 OAuth provider 的 token 塞进 NextAuth session,供前端取用:
// - Google: account.id_token → 调后端 /api/auth/google-login 换业务 token // - Google: account.id_token → 调后端 /api/auth/google-login 换业务 token
// - Facebook: account.access_token → 调后端 /api/auth/facebook-login // - Facebook: account.access_token → 调后端 /api/auth/facebook-login
@@ -55,11 +52,6 @@ const handler = NextAuth({
return session; return session;
}, },
}, },
// 显式允许从请求头(X-Forwarded-Host)推断 host;消除 v4 [NEXTAUTH_URL] 警告
// 生产部署在反向代理后(nginx / cloudflare)必须开
// @ts-expect-error: `trustHost` 不在 v4.24.x 的 AuthOptions 类型里,但运行时支持
trustHost: true,
secret: process.env.AUTH_SECRET ?? "dev-secret-change-in-prod",
}); });
export { handler as GET, handler as POST }; export { handler as GET, handler as POST };