FM / callback

/home/techb158/balavpn.abdallabala.com/.next/server/app/api/auth/sso/callback/

/home/techb158/balavpn.abdallabala.com/.next/server/app/api/auth/sso/callback

Name	Size	Mode	Actions
route.js	14866	0666	edit dl rm
route.js.nft.json	4861	0666	edit dl rm
route_client-reference-manifest.js	9643	0666	edit dl rm

Edit: /home/techb158/balavpn.abdallabala.com/.next/server/app/api/auth/sso/callback/route.js (14866B)

(()=>{var a={};a.id=4310,a.ids=[4310],a.modules={261:a=>{"use strict";a.exports=require("next/dist/shared/lib/router/utils/app-paths")},3421:(a,b,c)=>{"use strict";Object.defineProperty(b,"I",{enumerable:!0,get:function(){return g}});let d=c(71237),e=c(55088),f=c(17679);async function g(a,b,c,g){if((0,d.isNodeNextResponse)(b)){var h;b.statusCode=c.status,b.statusMessage=c.statusText;let d=["set-cookie","www-authenticate","proxy-authenticate","vary"];null==(h=c.headers)||h.forEach((a,c)=>{if("x-middleware-set-cookie"!==c.toLowerCase())if("set-cookie"===c.toLowerCase())for(let d of(0,f.splitCookiesString)(a))b.appendHeader(c,d);else{let e=void 0!==b.getHeader(c);(d.includes(c.toLowerCase())||!e)&&b.appendHeader(c,a)}});let{originalResponse:i}=b;c.body&&"HEAD"!==a.method?await (0,e.pipeToNodeResponse)(c.body,i,g):i.end()}}},10461:(a,b,c)=>{"use strict";c.r(b),c.d(b,{handler:()=>D,patchFetch:()=>C,routeModule:()=>y,serverHooks:()=>B,workAsyncStorage:()=>z,workUnitAsyncStorage:()=>A});var d={};c.r(d),c.d(d,{GET:()=>x});var e=c(95736),f=c(9117),g=c(4044),h=c(39326),i=c(32324),j=c(261),k=c(54290),l=c(85328),m=c(38928),n=c(46595),o=c(3421),p=c(17679),q=c(41681),r=c(63446),s=c(86439),t=c(51356);let{handleSsoCallback:u}=c(49970),{getOidcConfig:v,stateCookieName:w}=c(75617);async function x(a){try{var b;let{searchParams:c}=new URL(a.url),d=c.get("code"),e=c.get("state"),f=c.get("error");if(f)return new Response(JSON.stringify({error:`SSO provider returned: ${f}`}),{status:400,headers:{"Content-Type":"application/json"}});if(!d)return new Response(JSON.stringify({error:"Missing authorization code"}),{status:400,headers:{"Content-Type":"application/json"}});let g=a.headers.get("cookie")||"",h=function(a,b){let c=b?.match(RegExp(`(?:^|;)\\s*${a}=([^;]+)`));return c?decodeURIComponent(c[1]):null}(w(),g);if(e&&h&&e!==h)return new Response(JSON.stringify({error:"State mismatch — possible CSRF"}),{status:403,headers:{"Content-Type":"application/json"}});let{session:i}=await u(d),j=`${w()}=; HttpOnly; SameSite=Lax; Path=/; Max-Age=0`,k=(b=i.token,`cosmic_session=${b}; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=604800`),l=v(),m=l?.redirectUrl?new URL(l.redirectUrl).origin:"https://balavpn.abdallabala.com";return new Response(null,{status:302,headers:{Location:`${m}/dashboard`,"Set-Cookie":`${k}, ${j}`,"Cache-Control":"no-store"}})}catch(b){let a=b.message||"SSO callback failed";return new Response(`<html><body><h2>SSO Error</h2><p>${a}</p><a href="/login">Back to login</a></body></html>`,{status:b.status||500,headers:{"Content-Type":"text/html"}})}}let y=new e.AppRouteRouteModule({definition:{kind:f.RouteKind.APP_ROUTE,page:"/api/auth/sso/callback/route",pathname:"/api/auth/sso/callback",filename:"route",bundlePath:"app/api/auth/sso/callback/route"},distDir:".next",relativeProjectDir:"",resolvedPagePath:"C:\\Users\\abd_b\\OneDrive\\Desktop\\COSMIC AI-Risk Dashboard\\Step 12 is complete Final QA, Demo Readiness, and Submission Freeze\\application\\saas-app\\src\\app\\api\\auth\\sso\\callback\\route.js",nextConfigOutput:"standalone",userland:d}),{workAsyncStorage:z,workUnitAsyncStorage:A,serverHooks:B}=y;function C(){return(0,g.patchFetch)({workAsyncStorage:z,workUnitAsyncStorage:A})}async function D(a,b,c){var d;let e="/api/auth/sso/callback/route";"/index"===e&&(e="/");let g=await y.prepare(a,b,{srcPage:e,multiZoneDraftMode:!1});if(!g)return b.statusCode=400,b.end("Bad Request"),null==c.waitUntil||c.waitUntil.call(c,Promise.resolve()),null;let{buildId:u,params:v,nextConfig:w,isDraftMode:x,prerenderManifest:z,routerServerContext:A,isOnDemandRevalidate:B,revalidateOnlyGenerated:C,resolvedPathname:D}=g,E=(0,j.normalizeAppPath)(e),F=!!(z.dynamicRoutes[E]||z.routes[D]);if(F&&!x){let a=!!z.routes[D],b=z.dynamicRoutes[E];if(b&&!1===b.fallback&&!a)throw new s.NoFallbackError}let G=null;!F||y.isDev||x||(G="/index"===(G=D)?"/":G);let H=!0===y.isDev||!F,I=F&&!H,J=a.method||"GET",K=(0,i.getTracer)(),L=K.getActiveScopeSpan(),M={params:v,prerenderManifest:z,renderOpts:{experimental:{cacheComponents:!!w.experimental.cacheComponents,authInterrupts:!!w.experimental.authInterrupts},supportsDynamicResponse:H,incrementalCache:(0,h.getRequestMeta)(a,"incrementalCache"),cacheLifeProfiles:null==(d=w.experimental)?void 0:d.cacheLife,isRevalidate:I,waitUntil:c.waitUntil,onClose:a=>{b.on("close",a)},onAfterTaskError:void 0,onInstrumentationRequestError:(b,c,d)=>y.onRequestError(a,b,d,A)},sharedContext:{buildId:u}},N=new k.NodeNextRequest(a),O=new k.NodeNextResponse(b),P=l.NextRequestAdapter.fromNodeNextRequest(N,(0,l.signalFromNodeResponse)(b));try{let d=async c=>y.handle(P,M).finally(()=>{if(!c)return;c.setAttributes({"http.status_code":b.statusCode,"next.rsc":!1});let d=K.getRootSpanAttributes();if(!d)return;if(d.get("next.span_type")!==m.BaseServerSpan.handleRequest)return void console.warn(`Unexpected root span type '${d.get("next.span_type")}'. Please report this Next.js issue https://github.com/vercel/next.js`);let e=d.get("next.route");if(e){let a=`${J} ${e}`;c.setAttributes({"next.route":e,"http.route":e,"next.span_name":a}),c.updateName(a)}else c.updateName(`${J} ${a.url}`)}),g=async g=>{var i,j;let k=async({previousCacheEntry:f})=>{try{if(!(0,h.getRequestMeta)(a,"minimalMode")&&B&&C&&!f)return b.statusCode=404,b.setHeader("x-nextjs-cache","REVALIDATED"),b.end("This page could not be found"),null;let e=await d(g);a.fetchMetrics=M.renderOpts.fetchMetrics;let i=M.renderOpts.pendingWaitUntil;i&&c.waitUntil&&(c.waitUntil(i),i=void 0);let j=M.renderOpts.collectedTags;if(!F)return await (0,o.I)(N,O,e,M.renderOpts.pendingWaitUntil),null;{let a=await e.blob(),b=(0,p.toNodeOutgoingHttpHeaders)(e.headers);j&&(b[r.NEXT_CACHE_TAGS_HEADER]=j),!b["content-type"]&&a.type&&(b["content-type"]=a.type);let c=void 0!==M.renderOpts.collectedRevalidate&&!(M.renderOpts.collectedRevalidate>=r.INFINITE_CACHE)&&M.renderOpts.collectedRevalidate,d=void 0===M.renderOpts.collectedExpire||M.renderOpts.collectedExpire>=r.INFINITE_CACHE?void 0:M.renderOpts.collectedExpire;return{value:{kind:t.CachedRouteKind.APP_ROUTE,status:e.status,body:Buffer.from(await a.arrayBuffer()),headers:b},cacheControl:{revalidate:c,expire:d}}}}catch(b){throw(null==f?void 0:f.isStale)&&await y.onRequestError(a,b,{routerKind:"App Router",routePath:e,routeType:"route",revalidateReason:(0,n.c)({isRevalidate:I,isOnDemandRevalidate:B})},A),b}},l=await y.handleResponse({req:a,nextConfig:w,cacheKey:G,routeKind:f.RouteKind.APP_ROUTE,isFallback:!1,prerenderManifest:z,isRoutePPREnabled:!1,isOnDemandRevalidate:B,revalidateOnlyGenerated:C,responseGenerator:k,waitUntil:c.waitUntil});if(!F)return null;if((null==l||null==(i=l.value)?void 0:i.kind)!==t.CachedRouteKind.APP_ROUTE)throw Object.defineProperty(Error(`Invariant: app-route received invalid cache entry ${null==l||null==(j=l.value)?void 0:j.kind}`),"__NEXT_ERROR_CODE",{value:"E701",enumerable:!1,configurable:!0});(0,h.getRequestMeta)(a,"minimalMode")||b.setHeader("x-nextjs-cache",B?"REVALIDATED":l.isMiss?"MISS":l.isStale?"STALE":"HIT"),x&&b.setHeader("Cache-Control","private, no-cache, no-store, max-age=0, must-revalidate");let m=(0,p.fromNodeOutgoingHttpHeaders)(l.value.headers);return(0,h.getRequestMeta)(a,"minimalMode")&&F||m.delete(r.NEXT_CACHE_TAGS_HEADER),!l.cacheControl||b.getHeader("Cache-Control")||m.get("Cache-Control")||m.set("Cache-Control",(0,q.getCacheControlHeader)(l.cacheControl)),await (0,o.I)(N,O,new Response(l.value.body,{headers:m,status:l.value.status||200})),null};L?await g(L):await K.withPropagatedContext(a.headers,()=>K.trace(m.BaseServerSpan.handleRequest,{spanName:`${J} ${a.url}`,kind:i.SpanKind.SERVER,attributes:{"http.method":J,"http.target":a.url}},g))}catch(b){if(b instanceof s.NoFallbackError||await y.onRequestError(a,b,{routerKind:"App Router",routePath:E,routeType:"route",revalidateReason:(0,n.c)({isRevalidate:I,isOnDemandRevalidate:B})}),F)throw b;return await (0,o.I)(N,O,new Response(null,{status:500})),null}}},10846:a=>{"use strict";a.exports=require("next/dist/compiled/next-server/app-page.runtime.prod.js")},17964:(a,b,c)=>{"use strict";let{PrismaClient:d}=c(96330);a.exports={prisma:globalThis.__cosmicPrisma||new d}},29294:a=>{"use strict";a.exports=require("next/dist/server/app-render/work-async-storage.external.js")},44870:a=>{"use strict";a.exports=require("next/dist/compiled/next-server/app-route.runtime.prod.js")},49970:(a,b,c)=>{"use strict";let{prisma:d}=c(17964),{createSession:e}=c(68559),{getOidcConfig:f,discoverProvider:g,generateNonce:h,decodeJwtPayload:i}=c(75617);async function j(a,b,c,d,e){let f=new URLSearchParams({grant_type:"authorization_code",code:a,redirect_uri:b,client_id:c,client_secret:d}),g=await fetch(e,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:f.toString()});if(!g.ok){let a=await g.text();throw Error(`Token exchange failed (${g.status}): ${a}`)}return g.json()}a.exports={handleSsoCallback:async function(a){let b=f();if(!b)throw Object.assign(Error("SSO not configured"),{status:501});let c=await g(b.issuer),h=(await j(a,b.redirectUrl,b.clientId,b.clientSecret,c.token_endpoint)).id_token;if(!h)throw Object.assign(Error("No id_token returned from provider"),{status:400});let k=i(h),l=k.email;if(!l)throw Object.assign(Error("Email not provided by SSO provider"),{status:400});let m=k.name||k.preferred_username||l.split("@")[0],n=await d.user.findUnique({where:{email:l}});if(n)await d.user.update({where:{id:n.id},data:{lastLoginAt:new Date,displayName:m}});else{n=await d.user.create({data:{email:l,displayName:m,emailVerifiedAt:new Date}});let a=m.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/(^-|-$)/g,"")+"-"+Date.now().toString(36),b=await d.role.upsert({where:{code:"owner"},update:{},create:{code:"owner",name:"Owner",permissions:["*"],system:!0}}),c=await d.organization.create({data:{name:`${m}'s Organization`,slug:a,status:"TRIAL",planCode:"pilot",manualBilling:!0}});await d.membership.create({data:{organizationId:c.id,userId:n.id,roleId:b.id,status:"ACTIVE"}}),await d.subscription.create({data:{organizationId:c.id,source:"MANUAL",status:"TRIALING",planCode:"pilot",userLimit:5,projectLimit:3}}).catch(()=>{});let e=await d.workspace.create({data:{organizationId:c.id,name:"Default Workspace",slug:"default-workspace",type:"B2B_TEAM",status:"TRIAL"}});await d.project.create({data:{workspaceId:e.id,name:"My Project",projectType:"AI-Enabler",status:"Active",riskAppetite:50}})}let o=await e(n.id);return{user:n,session:o}}}},55511:a=>{"use strict";a.exports=require("crypto")},63033:a=>{"use strict";a.exports=require("next/dist/server/app-render/work-unit-async-storage.external.js")},68559:(a,b,c)=>{"use strict";let{prisma:d}=c(17964),{randomBytes:e}=c(55511),f=c(87082);async function g(a){return f.hash(a,12)}async function h(a,b){return!!b&&f.compare(a,b)}async function i(a){let b=e(48).toString("hex");return await d.session.create({data:{userId:a,token:b,expiresAt:new Date(Date.now()+6048e5)}})}async function j(a){if(!a)return null;let b=await d.session.findUnique({where:{token:a},include:{user:{include:{memberships:{where:{status:"ACTIVE"},include:{organization:!0,role:!0}}}}}});return!b||b.expiresAt<new Date?(b&&await d.session.delete({where:{id:b.id}}).catch(()=>{}),null):b}async function k(a){let b=await j(a);return b?b.user:null}a.exports={signup:async function({email:a,displayName:b,password:c}){if(!a||!c){let a=Error("Email and password are required");throw a.status=400,a}if(await d.user.findUnique({where:{email:a}})){let a=Error("Email already registered");throw a.status=409,a}let e=await g(c),f=await d.user.create({data:{email:a,displayName:b||a.split("@")[0],passwordHash:e,emailVerifiedAt:new Date}}),h=(b||a.split("@")[0]).toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/(^-|-$)/g,"")+"-"+Date.now().toString(36),j=await d.role.upsert({where:{code:"owner"},update:{},create:{code:"owner",name:"Owner",permissions:["*"],system:!0}}),k=await d.organization.create({data:{name:(b||a.split("@")[0])+"'s Organization",slug:h,status:"TRIAL",planCode:"pilot",manualBilling:!0}});await d.membership.create({data:{organizationId:k.id,userId:f.id,roleId:j.id,status:"ACTIVE"}}),await d.subscription.create({data:{organizationId:k.id,source:"MANUAL",status:"TRIALING",planCode:"pilot",userLimit:5,projectLimit:3,reportLimitMonthly:25,integrationLimit:2,adminOverride:!1}}).catch(()=>{});let l=await d.workspace.create({data:{organizationId:k.id,name:"Default Workspace",slug:"default-workspace",type:"B2B_TEAM",status:"TRIAL"}});await d.project.create({data:{workspaceId:l.id,name:"My Project",projectType:"AI-Enabler",status:"Active",riskAppetite:50,description:"Project created during signup"}});let m=await i(f.id);return{user:f,session:m}},login:async function({email:a,password:b}){if(!a||!b){let a=Error("Email and password are required");throw a.status=400,a}let c=await d.user.findUnique({where:{email:a},include:{memberships:{where:{status:"ACTIVE"},include:{organization:!0,role:!0}}}});if(!c||!await h(b,c.passwordHash)){let a=Error("Invalid email or password");throw a.status=401,a}await d.user.update({where:{id:c.id},data:{lastLoginAt:new Date}});let e=await i(c.id);return{user:c,session:e}},logout:async function(a){a&&await d.session.deleteMany({where:{token:a}}).catch(()=>{})},getSession:j,getActorFromSession:k,createSession:i,SESSION_DURATION_MS:6048e5}},75617:(a,b,c)=>{"use strict";let{randomBytes:d}=c(55511);function e(a){return a.toString("base64").replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}a.exports={getOidcConfig:function(){if("true"!==process.env.COSMIC_SSO_ENABLED)return null;let a=process.env.COSMIC_OIDC_ISSUER,b=process.env.COSMIC_OIDC_CLIENT_ID,c=process.env.COSMIC_OIDC_CLIENT_SECRET;return a&&b&&c?{issuer:a,clientId:b,clientSecret:c,redirectUrl:process.env.COSMIC_OIDC_REDIRECT_URL||"https://balavpn.abdallabala.com/api/auth/sso/callback"}:null},discoverProvider:async function a(a){let b=process.env.COSMIC_OIDC_DISCOVERY_URL||a.replace(/\/+$/,"")+"/.well-known/openid-configuration",c=await fetch(b);if(!c.ok)throw Error(`OIDC discovery failed (${c.status}) for ${b}`);return c.json()},generateState:function(){return e(d(32))},generateNonce:function(){return e(d(32))},decodeJwtPayload:function(a){let b=a.split(".");if(3!==b.length)throw Error("Invalid JWT format");return JSON.parse(Buffer.from(b[1],"base64url").toString("utf8"))},base64UrlEncode:e,stateCookieName:function(){return"cosmic_sso_state"},getCookieExpires:function(){return new Date(Date.now()+6e5).toUTCString()}}},78335:()=>{},86439:a=>{"use strict";a.exports=require("next/dist/shared/lib/no-fallback-error.external")},95736:(a,b,c)=>{"use strict";a.exports=c(44870)},96330:a=>{"use strict";a.exports=require("@prisma/client")},96487:()=>{}};var b=require("../../../../../webpack-runtime.js");b.C(a);var c=b.X(0,[5873,7082],()=>b(b.s=10461));module.exports=c})();

SSO Error

${a}

Back to login`,{status:b.status||500,headers:{"Content-Type":"text/html"}})}}let y=new e.AppRouteRouteModule({definition:{kind:f.RouteKind.APP_ROUTE,page:"/api/auth/sso/callback/route",pathname:"/api/auth/sso/callback",filename:"route",bundlePath:"app/api/auth/sso/callback/route"},distDir:".next",relativeProjectDir:"",resolvedPagePath:"C:\\Users\\abd_b\\OneDrive\\Desktop\\COSMIC AI-Risk Dashboard\\Step 12 is complete Final QA, Demo Readiness, and Submission Freeze\\application\\saas-app\\src\\app\\api\\auth\\sso\\callback\\route.js",nextConfigOutput:"standalone",userland:d}),{workAsyncStorage:z,workUnitAsyncStorage:A,serverHooks:B}=y;function C(){return(0,g.patchFetch)({workAsyncStorage:z,workUnitAsyncStorage:A})}async function D(a,b,c){var d;let e="/api/auth/sso/callback/route";"/index"===e&&(e="/");let g=await y.prepare(a,b,{srcPage:e,multiZoneDraftMode:!1});if(!g)return b.statusCode=400,b.end("Bad Request"),null==c.waitUntil||c.waitUntil.call(c,Promise.resolve()),null;let{buildId:u,params:v,nextConfig:w,isDraftMode:x,prerenderManifest:z,routerServerContext:A,isOnDemandRevalidate:B,revalidateOnlyGenerated:C,resolvedPathname:D}=g,E=(0,j.normalizeAppPath)(e),F=!!(z.dynamicRoutes[E]||z.routes[D]);if(F&&!x){let a=!!z.routes[D],b=z.dynamicRoutes[E];if(b&&!1===b.fallback&&!a)throw new s.NoFallbackError}let G=null;!F||y.isDev||x||(G="/index"===(G=D)?"/":G);let H=!0===y.isDev||!F,I=F&&!H,J=a.method||"GET",K=(0,i.getTracer)(),L=K.getActiveScopeSpan(),M={params:v,prerenderManifest:z,renderOpts:{experimental:{cacheComponents:!!w.experimental.cacheComponents,authInterrupts:!!w.experimental.authInterrupts},supportsDynamicResponse:H,incrementalCache:(0,h.getRequestMeta)(a,"incrementalCache"),cacheLifeProfiles:null==(d=w.experimental)?void 0:d.cacheLife,isRevalidate:I,waitUntil:c.waitUntil,onClose:a=>{b.on("close",a)},onAfterTaskError:void 0,onInstrumentationRequestError:(b,c,d)=>y.onRequestError(a,b,d,A)},sharedContext:{buildId:u}},N=new k.NodeNextRequest(a),O=new k.NodeNextResponse(b),P=l.NextRequestAdapter.fromNodeNextRequest(N,(0,l.signalFromNodeResponse)(b));try{let d=async c=>y.handle(P,M).finally(()=>{if(!c)return;c.setAttributes({"http.status_code":b.statusCode,"next.rsc":!1});let d=K.getRootSpanAttributes();if(!d)return;if(d.get("next.span_type")!==m.BaseServerSpan.handleRequest)return void console.warn(`Unexpected root span type '${d.get("next.span_type")}'. Please report this Next.js issue https://github.com/vercel/next.js`);let e=d.get("next.route");if(e){let a=`${J} ${e}`;c.setAttributes({"next.route":e,"http.route":e,"next.span_name":a}),c.updateName(a)}else c.updateName(`${J} ${a.url}`)}),g=async g=>{var i,j;let k=async({previousCacheEntry:f})=>{try{if(!(0,h.getRequestMeta)(a,"minimalMode")&&B&&C&&!f)return b.statusCode=404,b.setHeader("x-nextjs-cache","REVALIDATED"),b.end("This page could not be found"),null;let e=await d(g);a.fetchMetrics=M.renderOpts.fetchMetrics;let i=M.renderOpts.pendingWaitUntil;i&&c.waitUntil&&(c.waitUntil(i),i=void 0);let j=M.renderOpts.collectedTags;if(!F)return await (0,o.I)(N,O,e,M.renderOpts.pendingWaitUntil),null;{let a=await e.blob(),b=(0,p.toNodeOutgoingHttpHeaders)(e.headers);j&&(b[r.NEXT_CACHE_TAGS_HEADER]=j),!b["content-type"]&&a.type&&(b["content-type"]=a.type);let c=void 0!==M.renderOpts.collectedRevalidate&&!(M.renderOpts.collectedRevalidate>=r.INFINITE_CACHE)&&M.renderOpts.collectedRevalidate,d=void 0===M.renderOpts.collectedExpire||M.renderOpts.collectedExpire>=r.INFINITE_CACHE?void 0:M.renderOpts.collectedExpire;return{value:{kind:t.CachedRouteKind.APP_ROUTE,status:e.status,body:Buffer.from(await a.arrayBuffer()),headers:b},cacheControl:{revalidate:c,expire:d}}}}catch(b){throw(null==f?void 0:f.isStale)&&await y.onRequestError(a,b,{routerKind:"App Router",routePath:e,routeType:"route",revalidateReason:(0,n.c)({isRevalidate:I,isOnDemandRevalidate:B})},A),b}},l=await y.handleResponse({req:a,nextConfig:w,cacheKey:G,routeKind:f.RouteKind.APP_ROUTE,isFallback:!1,prerenderManifest:z,isRoutePPREnabled:!1,isOnDemandRevalidate:B,revalidateOnlyGenerated:C,responseGenerator:k,waitUntil:c.waitUntil});if(!F)return null;if((null==l||null==(i=l.value)?void 0:i.kind)!==t.CachedRouteKind.APP_ROUTE)throw Object.defineProperty(Error(`Invariant: app-route received invalid cache entry ${null==l||null==(j=l.value)?void 0:j.kind}`),"__NEXT_ERROR_CODE",{value:"E701",enumerable:!1,configurable:!0});(0,h.getRequestMeta)(a,"minimalMode")||b.setHeader("x-nextjs-cache",B?"REVALIDATED":l.isMiss?"MISS":l.isStale?"STALE":"HIT"),x&&b.setHeader("Cache-Control","private, no-cache, no-store, max-age=0, must-revalidate");let m=(0,p.fromNodeOutgoingHttpHeaders)(l.value.headers);return(0,h.getRequestMeta)(a,"minimalMode")&&F||m.delete(r.NEXT_CACHE_TAGS_HEADER),!l.cacheControl||b.getHeader("Cache-Control")||m.get("Cache-Control")||m.set("Cache-Control",(0,q.getCacheControlHeader)(l.cacheControl)),await (0,o.I)(N,O,new Response(l.value.body,{headers:m,status:l.value.status||200})),null};L?await g(L):await K.withPropagatedContext(a.headers,()=>K.trace(m.BaseServerSpan.handleRequest,{spanName:`${J} ${a.url}`,kind:i.SpanKind.SERVER,attributes:{"http.method":J,"http.target":a.url}},g))}catch(b){if(b instanceof s.NoFallbackError||await y.onRequestError(a,b,{routerKind:"App Router",routePath:E,routeType:"route",revalidateReason:(0,n.c)({isRevalidate:I,isOnDemandRevalidate:B})}),F)throw b;return await (0,o.I)(N,O,new Response(null,{status:500})),null}}},10846:a=>{"use strict";a.exports=require("next/dist/compiled/next-server/app-page.runtime.prod.js")},17964:(a,b,c)=>{"use strict";let{PrismaClient:d}=c(96330);a.exports={prisma:globalThis.__cosmicPrisma||new d}},29294:a=>{"use strict";a.exports=require("next/dist/server/app-render/work-async-storage.external.js")},44870:a=>{"use strict";a.exports=require("next/dist/compiled/next-server/app-route.runtime.prod.js")},49970:(a,b,c)=>{"use strict";let{prisma:d}=c(17964),{createSession:e}=c(68559),{getOidcConfig:f,discoverProvider:g,generateNonce:h,decodeJwtPayload:i}=c(75617);async function j(a,b,c,d,e){let f=new URLSearchParams({grant_type:"authorization_code",code:a,redirect_uri:b,client_id:c,client_secret:d}),g=await fetch(e,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:f.toString()});if(!g.ok){let a=await g.text();throw Error(`Token exchange failed (${g.status}): ${a}`)}return g.json()}a.exports={handleSsoCallback:async function(a){let b=f();if(!b)throw Object.assign(Error("SSO not configured"),{status:501});let c=await g(b.issuer),h=(await j(a,b.redirectUrl,b.clientId,b.clientSecret,c.token_endpoint)).id_token;if(!h)throw Object.assign(Error("No id_token returned from provider"),{status:400});let k=i(h),l=k.email;if(!l)throw Object.assign(Error("Email not provided by SSO provider"),{status:400});let m=k.name||k.preferred_username||l.split("@")[0],n=await d.user.findUnique({where:{email:l}});if(n)await d.user.update({where:{id:n.id},data:{lastLoginAt:new Date,displayName:m}});else{n=await d.user.create({data:{email:l,displayName:m,emailVerifiedAt:new Date}});let a=m.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/(^-|-$)/g,"")+"-"+Date.now().toString(36),b=await d.role.upsert({where:{code:"owner"},update:{},create:{code:"owner",name:"Owner",permissions:["*"],system:!0}}),c=await d.organization.create({data:{name:`${m}'s Organization`,slug:a,status:"TRIAL",planCode:"pilot",manualBilling:!0}});await d.membership.create({data:{organizationId:c.id,userId:n.id,roleId:b.id,status:"ACTIVE"}}),await d.subscription.create({data:{organizationId:c.id,source:"MANUAL",status:"TRIALING",planCode:"pilot",userLimit:5,projectLimit:3}}).catch(()=>{});let e=await d.workspace.create({data:{organizationId:c.id,name:"Default Workspace",slug:"default-workspace",type:"B2B_TEAM",status:"TRIAL"}});await d.project.create({data:{workspaceId:e.id,name:"My Project",projectType:"AI-Enabler",status:"Active",riskAppetite:50}})}let o=await e(n.id);return{user:n,session:o}}}},55511:a=>{"use strict";a.exports=require("crypto")},63033:a=>{"use strict";a.exports=require("next/dist/server/app-render/work-unit-async-storage.external.js")},68559:(a,b,c)=>{"use strict";let{prisma:d}=c(17964),{randomBytes:e}=c(55511),f=c(87082);async function g(a){return f.hash(a,12)}async function h(a,b){return!!b&&f.compare(a,b)}async function i(a){let b=e(48).toString("hex");return await d.session.create({data:{userId:a,token:b,expiresAt:new Date(Date.now()+6048e5)}})}async function j(a){if(!a)return null;let b=await d.session.findUnique({where:{token:a},include:{user:{include:{memberships:{where:{status:"ACTIVE"},include:{organization:!0,role:!0}}}}}});return!b||b.expiresAt{}),null):b}async function k(a){let b=await j(a);return b?b.user:null}a.exports={signup:async function({email:a,displayName:b,password:c}){if(!a||!c){let a=Error("Email and password are required");throw a.status=400,a}if(await d.user.findUnique({where:{email:a}})){let a=Error("Email already registered");throw a.status=409,a}let e=await g(c),f=await d.user.create({data:{email:a,displayName:b||a.split("@")[0],passwordHash:e,emailVerifiedAt:new Date}}),h=(b||a.split("@")[0]).toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/(^-|-$)/g,"")+"-"+Date.now().toString(36),j=await d.role.upsert({where:{code:"owner"},update:{},create:{code:"owner",name:"Owner",permissions:["*"],system:!0}}),k=await d.organization.create({data:{name:(b||a.split("@")[0])+"'s Organization",slug:h,status:"TRIAL",planCode:"pilot",manualBilling:!0}});await d.membership.create({data:{organizationId:k.id,userId:f.id,roleId:j.id,status:"ACTIVE"}}),await d.subscription.create({data:{organizationId:k.id,source:"MANUAL",status:"TRIALING",planCode:"pilot",userLimit:5,projectLimit:3,reportLimitMonthly:25,integrationLimit:2,adminOverride:!1}}).catch(()=>{});let l=await d.workspace.create({data:{organizationId:k.id,name:"Default Workspace",slug:"default-workspace",type:"B2B_TEAM",status:"TRIAL"}});await d.project.create({data:{workspaceId:l.id,name:"My Project",projectType:"AI-Enabler",status:"Active",riskAppetite:50,description:"Project created during signup"}});let m=await i(f.id);return{user:f,session:m}},login:async function({email:a,password:b}){if(!a||!b){let a=Error("Email and password are required");throw a.status=400,a}let c=await d.user.findUnique({where:{email:a},include:{memberships:{where:{status:"ACTIVE"},include:{organization:!0,role:!0}}}});if(!c||!await h(b,c.passwordHash)){let a=Error("Invalid email or password");throw a.status=401,a}await d.user.update({where:{id:c.id},data:{lastLoginAt:new Date}});let e=await i(c.id);return{user:c,session:e}},logout:async function(a){a&&await d.session.deleteMany({where:{token:a}}).catch(()=>{})},getSession:j,getActorFromSession:k,createSession:i,SESSION_DURATION_MS:6048e5}},75617:(a,b,c)=>{"use strict";let{randomBytes:d}=c(55511);function e(a){return a.toString("base64").replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}a.exports={getOidcConfig:function(){if("true"!==process.env.COSMIC_SSO_ENABLED)return null;let a=process.env.COSMIC_OIDC_ISSUER,b=process.env.COSMIC_OIDC_CLIENT_ID,c=process.env.COSMIC_OIDC_CLIENT_SECRET;return a&&b&&c?{issuer:a,clientId:b,clientSecret:c,redirectUrl:process.env.COSMIC_OIDC_REDIRECT_URL||"https://balavpn.abdallabala.com/api/auth/sso/callback"}:null},discoverProvider:async function a(a){let b=process.env.COSMIC_OIDC_DISCOVERY_URL||a.replace(/\/+$/,"")+"/.well-known/openid-configuration",c=await fetch(b);if(!c.ok)throw Error(`OIDC discovery failed (${c.status}) for ${b}`);return c.json()},generateState:function(){return e(d(32))},generateNonce:function(){return e(d(32))},decodeJwtPayload:function(a){let b=a.split(".");if(3!==b.length)throw Error("Invalid JWT format");return JSON.parse(Buffer.from(b[1],"base64url").toString("utf8"))},base64UrlEncode:e,stateCookieName:function(){return"cosmic_sso_state"},getCookieExpires:function(){return new Date(Date.now()+6e5).toUTCString()}}},78335:()=>{},86439:a=>{"use strict";a.exports=require("next/dist/shared/lib/no-fallback-error.external")},95736:(a,b,c)=>{"use strict";a.exports=c(44870)},96330:a=>{"use strict";a.exports=require("@prisma/client")},96487:()=>{}};var b=require("../../../../../webpack-runtime.js");b.C(a);var c=b.X(0,[5873,7082],()=>b(b.s=10461));module.exports=c})();