Dynamic host url or OST_BASE_HOST

[AlecBlance]

I have a self-hosted website that uses Outstatic. However, I have an issue where after the callback has been called, it would redirect to localhost:3000. I've looked into this and it seemed that we don't have control over host if I'm correct.

outstatic/packages/outstatic/src/app/api/auth/callback.ts

Lines 95 to 102 in cf34776

	const url = req.nextUrl.clone()
	url.pathname = (process.env.OST_BASE_PATH || '') + '/outstatic'
	url.search = ''
	if (response.status !== 200) {
	const data = await response.json()
	url.searchParams.set('error', data.error)
	}
	return NextResponse.redirect(url)

We can simply add another env variable (e.g. OST_BASE_HOST) that replaces the scheme and host. Let me know what you think.

[avitorio]

Is your callback url on your GitHub oauth pointing to localhost:3000?

[avitorio]

Ok, this shouldn't be happening.
Can you double check the credentials you have on your .env to see if the keys you are using aren't the ones you use for localhost?

Also, can you try logging with an incognito browser? Sometimes redirects get cached.

[AlecBlance]

Can you double check the credentials you have on your .env to see if the keys you are using aren't the ones you use for localhost?

Yup, it is not using the localhost since I have a different Oauth App for localhost. I even created two Oauth Apps for my domain, Outstatic and Outstatic Blog just to make sure I'm copying the right id and secret.

Also, can you try logging with an incognito browser? Sometimes redirects get cached.

Sure this is what it looks like. Still the same.

[AlecBlance]

I guess these might help. Below I have attached my setup, just to help you visualize what might be happening.

And btw, I found this issue vercel/next.js#37536. If you open this, the req.headers.get("Host") actually returns the correct host.

[avitorio]

This is weird. There's no mention of localhost in the outstatic package. So the request must be changed at the cloudflare level.

I noticed that if I visit your https://alecblance.com/api/outstatic/callback endpoint directly from the browser I get sent to localhost:3000.

I really don't want to add another env var to the mix.

Have you tried setting your HTTP Host Header to alecblance.com on the Cloudflare tunnel?

[AlecBlance]

Yeah, there's no mention of localhost, it is coming from req.url or req.nextUrl just like in this issue vercel/next.js#37536. It happens on signout as well.

Have you tried setting your HTTP Host Header to alecblance.com on the Cloudflare tunnel?

I've tried it, and it is still the same. It only happens on redirects, so I can still use it if I access the /outstatic route after signing in.