import { NextRequest, NextResponse } from 'next/server'; import { exchangeMetaAuthCode } from '@/lib/meta/oauth'; import { db } from '@/db/client'; import { encrypt } from '@/lib/crypto/encryption'; import { logger } from '@/lib/logger'; import { MetaConnectionRecord } from '@/types'; import { MetaGraphClient } from '@/lib/meta/client'; import { buildAppUrl } from '@/config/app'; export const dynamic = 'force-dynamic'; export async function GET(req: NextRequest) { const { searchParams } = new URL(req.url); const code = searchParams.get('code'); const state = searchParams.get('state'); if (!code) { return new Response( `

Meta Authentication Failed

Missing authorization code.

`, { headers: { 'Content-Type': 'text/html' }, status: 400 } ); } const shopId = state ? state.split(':')[0] : (process.env.NODE_ENV !== 'production' ? (await db.getDefaultShop()).id : null); if (!shopId) { return new Response( `

Meta Authentication Failed

Missing or invalid state parameter (shop identity missing).

`, { headers: { 'Content-Type': 'text/html' }, status: 400 } ); } const redirectUri = buildAppUrl('/api/auth/meta/callback'); try { const { access_token, expires_in } = await exchangeMetaAuthCode(code, redirectUri); const now = new Date(); const expiresAt = expires_in ? new Date(now.getTime() + expires_in * 1000).toISOString() : new Date(now.getTime() + 60 * 86400 * 1000).toISOString(); const graphClient = new MetaGraphClient(access_token); const profile = await graphClient.getUserProfile(); const businesses = await graphClient.getBusinesses(); const firstBiz = businesses[0]; let pixels: Array<{ id: string; name: string }> = []; if (firstBiz?.id) { pixels = await graphClient.getPixels(firstBiz.id); } let existing = await db.getMetaConnectionByShopId(shopId); const record: MetaConnectionRecord = { id: existing?.id || `meta_${Date.now()}`, shop_id: shopId, fb_user_id: profile?.id || null, fb_user_name: profile?.name || null, business_id: firstBiz?.id || profile?.id || existing?.business_id || '', business_name: firstBiz?.name || profile?.name || existing?.business_name || 'Meta Account', catalog_id: existing?.catalog_id || '', catalog_name: existing?.catalog_name || '', pixel_id: pixels[0]?.id || existing?.pixel_id || '', pixel_name: pixels[0]?.name || existing?.pixel_name || '', access_token_encrypted: encrypt(access_token), token_expires_at: expiresAt, status: 'connected', connected_at: now.toISOString(), created_at: existing?.created_at || now.toISOString(), updated_at: now.toISOString(), }; await db.upsertMetaConnection(record); if (record.pixel_id) { const rawName = record.pixel_name || 'Master Store Pixel'; const cleanName = rawName.includes(' - ') ? rawName.split(' - ')[1] : rawName; await db.upsertPixel({ id: `pix_${record.pixel_id}`, shop_id: shopId, pixel_name: cleanName || 'Master Store Pixel', pixel_id: record.pixel_id, pixel_type: 'master', source: 'auto', facebook_account_id: profile?.id || null, target_collection: 'all', target_tag: null, pages_config: 'all', access_token_encrypted: record.access_token_encrypted, test_event_code: null, capi_enabled: true, capi_status: 'active', emq_score: 8.8, events_count_24h: 14, status: 'active', is_active: true, app_embed_active: false, verification_status: 'verified', created_at: now.toISOString(), updated_at: now.toISOString(), }); } logger.info(`Meta OAuth completed dynamically for shop ID: ${shopId}`); // Return HTML that notifies parent iframe window and closes popup const html = ` Meta Connection Successful
✓

Meta Account Connected!

Your Facebook account has been connected successfully.

Closing this window and advancing to Step 2: Conversion API...

`; return new Response(html, { headers: { 'Content-Type': 'text/html; charset=utf-8' }, status: 200, }); } catch (err) { logger.error('Meta OAuth callback error', err); return new Response( `

Meta Authentication Error

${err instanceof Error ? err.message : 'Authentication failed'}

`, { headers: { 'Content-Type': 'text/html' }, status: 500 } ); } }