hikmettan/winninghunter
1
0
Fork 0
forked from hikmet4434/winninghunter
Code Pull Requests Activity

feat: Google OAuth ile giris

Browse Source 
- User modeline googleId (unique) eklendi
- google start/callback API route'lari (state korumali, find-or-create)
- Login/register sayfalarina Google butonu
- docker-compose'a GOOGLE_CLIENT_ID/SECRET env gecisi
- tsconfig.tsbuildinfo gitignore'a eklendi
This commit is contained in:
hikmet4434
2026-08-02 16:50:34 +03:00
parent 17319a1555
commit bf2fc272f2
12 changed files with 272 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/app/api/auth/google/callback/route.ts
+89
View File
@@ -0,0 +1,89 @@
import { NextResponse } from "next/server";
import { cookies } from "next/headers";
import { UserRole } from "@prisma/client";
import { prisma } from "@/lib/db";
import { createSession } from "@/lib/auth/session";
import { isConfiguredAdminEmail } from "@/lib/admin-emails";
import { exchangeGoogleCode, fetchGoogleProfile, GOOGLE_STATE_COOKIE } from "@/lib/auth/google";
function redirectToLogin(error: string) {
return NextResponse.redirect(
new URL(`/login?error=${encodeURIComponent(error)}`, process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000")
);
}
export async function GET(req: Request) {
const url = new URL(req.url);
const code = url.searchParams.get("code");
const state = url.searchParams.get("state");
const oauthError = url.searchParams.get("error");
if (oauthError) return redirectToLogin(oauthError);
const cookieStore = await cookies();
const expectedState = cookieStore.get(GOOGLE_STATE_COOKIE)?.value;
cookieStore.delete(GOOGLE_STATE_COOKIE);
if (!code || !state || !expectedState || state !== expectedState) {
return redirectToLogin("GOOGLE_STATE_MISMATCH");
}
let tokens;
try {
tokens = await exchangeGoogleCode(code);
} catch (err) {
console.error("[google/callback] token exchange failed:", err);
return redirectToLogin("GOOGLE_AUTH_FAILED");
}
let profile;
try {
profile = await fetchGoogleProfile(tokens.access_token);
} catch (err) {
console.error("[google/callback] profile fetch failed:", err);
return redirectToLogin("GOOGLE_AUTH_FAILED");
}
if (!profile.sub) return redirectToLogin("GOOGLE_AUTH_FAILED");
const email = (profile.email || "").trim().toLowerCase();
if (!email) return redirectToLogin("GOOGLE_EMAIL_REQUIRED");
const isAdmin = isConfiguredAdminEmail(email);
const plan = await prisma.plan.findUnique({ where: { code: isAdmin ? "PREMIUM" : "FREE" } });
let user = await prisma.user.findUnique({ where: { googleId: profile.sub } });
if (!user) {
user = await prisma.user.findUnique({ where: { email } });
}
if (!user) {
if (!plan) return redirectToLogin("PLAN_NOT_SEEDED");
user = await prisma.user.create({
data: {
email,
googleId: profile.sub,
name: profile.name || email.split("@")[0],
avatarUrl: profile.picture || null,
locale: profile.locale || "tr",
role: isAdmin ? UserRole.ADMIN : UserRole.USER,
subscription: { create: { planId: plan.id, status: "ACTIVE" } }
}
});
} else {
user = await prisma.user.update({
where: { id: user.id },
data: {
googleId: user.googleId || profile.sub,
name: user.name || profile.name || null,
avatarUrl: user.avatarUrl || profile.picture || null,
lastLoginAt: new Date()
}
});
}
await createSession(user.id);
return NextResponse.redirect(
new URL("/dashboard/ads", process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000")
);
}
src/app/api/auth/google/start/route.ts
+32
View File
@@ -0,0 +1,32 @@
import { NextResponse } from "next/server";
import { cookies } from "next/headers";
import { randomToken } from "@/lib/auth/crypto";
import { googleAuthUrl, googleConfig, GOOGLE_STATE_COOKIE } from "@/lib/auth/google";
export async function GET() {
const config = googleConfig();
if (!config) {
return NextResponse.redirect(
new URL("/login?error=GOOGLE_NOT_CONFIGURED", process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000")
);
}
const state = randomToken(16);
const cookieStore = await cookies();
cookieStore.set(GOOGLE_STATE_COOKIE, state, {
httpOnly: true,
sameSite: "lax",
secure: process.env.NODE_ENV === "production",
path: "/",
maxAge: 600
});
const authUrl = googleAuthUrl(state);
if (!authUrl) {
return NextResponse.redirect(
new URL("/login?error=GOOGLE_NOT_CONFIGURED", process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000")
);
}
return NextResponse.redirect(authUrl);
}
src/app/login/page.tsx
+23 -1
View File
@@ -2,6 +2,17 @@
import { useState } from "react";
function GoogleIcon() {
return (
<svg width="18" height="18" viewBox="0 0 48 48" aria-hidden="true">
<path fill="#EA4335" d="M24 9.5c3.54 0 6.71 1.22 9.21 3.6l6.85-6.85C35.9 2.38 30.47 0 24 0 14.62 0 6.51 5.38 2.56 13.22l7.98 6.19C12.43 13.72 17.74 9.5 24 9.5z" />
<path fill="#4285F4" d="M46.98 24.55c0-1.57-.15-3.09-.38-4.55H24v9.02h12.94c-.58 2.96-2.26 5.48-4.78 7.18l7.73 6c4.51-4.18 7.09-10.36 7.09-17.65z" />
<path fill="#FBBC05" d="M10.53 28.59c-.48-1.45-.76-2.99-.76-4.59s.27-3.14.76-4.59l-7.98-6.19C.92 16.46 0 20.12 0 24c0 3.88.92 7.54 2.56 10.78l7.97-6.19z" />
<path fill="#34A853" d="M24 48c6.48 0 11.93-2.13 15.89-5.81l-7.73-6c-2.15 1.45-4.92 2.3-8.16 2.3-6.26 0-11.57-4.22-13.47-9.91l-7.98 6.19C6.51 42.62 14.62 48 24 48z" />
</svg>
);
}
export default function LoginPage() {
const [email, setEmail] = useState("");
const [password, setPassword] = useState("");
@@ -66,8 +77,19 @@ export default function LoginPage() {
/>
{error && <div className="mt-4 rounded-xl bg-red-50 p-3 text-sm text-red-700">{error}</div>}
<a href="/api/auth/google/start" className="mt-6 flex w-full items-center justify-center gap-3 rounded-xl border border-slate-200 bg-white px-4 py-3 font-semibold text-slate-700 transition hover:bg-slate-50">
<GoogleIcon />
Google ile devam et
</a>
<button type="submit" className="mt-6 w-full rounded-xl bg-violet-700 px-4 py-3 font-bold text-white hover:bg-violet-800 transition">
<div className="mt-4 flex items-center gap-3">
<div className="h-px flex-1 bg-slate-200" />
<span className="text-xs font-medium text-slate-400">veya</span>
<div className="h-px flex-1 bg-slate-200" />
</div>
<button type="submit" className="mt-4 w-full rounded-xl bg-violet-700 px-4 py-3 font-bold text-white hover:bg-violet-800 transition">
Giriş yap
</button>
src/app/register/page.tsx
+23 -1
View File
@@ -2,6 +2,17 @@
import { useState } from "react";
function GoogleIcon() {
return (
<svg width="18" height="18" viewBox="0 0 48 48" aria-hidden="true">
<path fill="#EA4335" d="M24 9.5c3.54 0 6.71 1.22 9.21 3.6l6.85-6.85C35.9 2.38 30.47 0 24 0 14.62 0 6.51 5.38 2.56 13.22l7.98 6.19C12.43 13.72 17.74 9.5 24 9.5z" />
<path fill="#4285F4" d="M46.98 24.55c0-1.57-.15-3.09-.38-4.55H24v9.02h12.94c-.58 2.96-2.26 5.48-4.78 7.18l7.73 6c4.51-4.18 7.09-10.36 7.09-17.65z" />
<path fill="#FBBC05" d="M10.53 28.59c-.48-1.45-.76-2.99-.76-4.59s.27-3.14.76-4.59l-7.98-6.19C.92 16.46 0 20.12 0 24c0 3.88.92 7.54 2.56 10.78l7.97-6.19z" />
<path fill="#34A853" d="M24 48c6.48 0 11.93-2.13 15.89-5.81l-7.73-6c-2.15 1.45-4.92 2.3-8.16 2.3-6.26 0-11.57-4.22-13.47-9.91l-7.98 6.19C6.51 42.62 14.62 48 24 48z" />
</svg>
);
}
export default function RegisterPage() {
const [email, setEmail] = useState("");
const [password, setPassword] = useState("");
@@ -54,8 +65,19 @@ export default function RegisterPage() {
/>
{error && <div className="mt-4 rounded-xl bg-red-50 p-3 text-sm text-red-700">{error}</div>}
<a href="/api/auth/google/start" className="mt-6 flex w-full items-center justify-center gap-3 rounded-xl border border-slate-200 bg-white px-4 py-3 font-semibold text-slate-700 transition hover:bg-slate-50">
<GoogleIcon />
Google ile devam et
</a>
<button className="mt-6 w-full rounded-xl bg-violet-700 px-4 py-3 font-bold text-white hover:bg-violet-800 transition">
<div className="mt-4 flex items-center gap-3">
<div className="h-px flex-1 bg-slate-200" />
<span className="text-xs font-medium text-slate-400">veya</span>
<div className="h-px flex-1 bg-slate-200" />
</div>
<button className="mt-4 w-full rounded-xl bg-violet-700 px-4 py-3 font-bold text-white hover:bg-violet-800 transition">
Hesap oluştur
</button>