From e6712a1e991edf61099e57b09cb95902e43a9986 Mon Sep 17 00:00:00 2001
From: aiyimickey <39365912+aiyimickey@users.noreply.github.com>
Date: Wed, 1 Jul 2026 22:23:20 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20callback=20=E4=BD=BF=E7=94=A8=20OIDC=5FR?=
 =?UTF-8?q?EDIRECT=5FURI=20=E6=9E=84=E9=80=A0=E5=85=AC=E5=85=B1=20URL?=
 =?UTF-8?q?=EF=BC=88LESSONS-LEARNED=20#16=EF=BC=89?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/app/api/auth/callback/route.ts | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/src/app/api/auth/callback/route.ts b/src/app/api/auth/callback/route.ts
index f372e40..a4edcbd 100644
--- a/src/app/api/auth/callback/route.ts
+++ b/src/app/api/auth/callback/route.ts
@@ -74,12 +74,10 @@ export async function GET(request: NextRequest) {
     payload: { username: userinfo.preferred_username, displayName: userinfo.name, role: user.role },
   })
 
-  // 使用 nginx 转发的 Host 头构造正确的公共 URL
-  const proto = request.headers.get('x-forwarded-proto') || 'http'
-  const host = request.headers.get('x-forwarded-host') || request.headers.get('host') || request.nextUrl.host
-  const publicUrl = `${proto}://${host}`
+  // 使用 OIDC_REDIRECT_URI 构造公共 URL（LESSONS-LEARNED #16）
+  const baseUrl = authConfig.oidcRedirectUri?.replace(/\/api\/auth\/callback.*/, '') || 'http://localhost:6181'
 
-  const response = NextResponse.redirect(new URL('/', publicUrl))
+  const response = NextResponse.redirect(new URL('/', baseUrl))
 
   // 签发 tlyq_session cookie
   response.cookies.set('tlyq_session', token, {