From 5af5ff7c0fa8a5ca85496a78d40f4e8c8ffd68d1 Mon Sep 17 00:00:00 2001
From: aiyimickey <39365912+aiyimickey@users.noreply.github.com>
Date: Wed, 1 Jul 2026 22:15:43 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20callback=20=E4=BD=BF=E7=94=A8=20X-Forwar?=
 =?UTF-8?q?ded-Host=20=E6=9E=84=E9=80=A0=E5=85=AC=E5=85=B1=20URL?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/app/api/auth/callback/route.ts | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/src/app/api/auth/callback/route.ts b/src/app/api/auth/callback/route.ts
index 0cafda4..f372e40 100644
--- a/src/app/api/auth/callback/route.ts
+++ b/src/app/api/auth/callback/route.ts
@@ -74,7 +74,12 @@ export async function GET(request: NextRequest) {
     payload: { username: userinfo.preferred_username, displayName: userinfo.name, role: user.role },
   })
 
-  const response = NextResponse.redirect(new URL('/', request.url))
+  // 使用 nginx 转发的 Host 头构造正确的公共 URL
+  const proto = request.headers.get('x-forwarded-proto') || 'http'
+  const host = request.headers.get('x-forwarded-host') || request.headers.get('host') || request.nextUrl.host
+  const publicUrl = `${proto}://${host}`
+
+  const response = NextResponse.redirect(new URL('/', publicUrl))
 
   // 签发 tlyq_session cookie
   response.cookies.set('tlyq_session', token, {