fix: update oauth endpoints for oauth-provider migration

- Fix end-session URL path (endsession → end-session)
- Add error logging to token exchange for debugging
- Remove debug logging from callback handler

Author: docimin

src/lib/auth.ts

@@ -145,7 +145,11 @@ export async function exchangeCodeForTokens(
 		}).toString(),
 	});
 
-	if (!response.ok) return null;
+	if (!response.ok) {
+		const err = await response.text().catch(() => "");
+		console.error(`[auth] exchangeCodeForTokens failed: ${response.status} ${err}`);
+		return null;
+	}
 	return response.json();
 }
 
@@ -165,7 +169,11 @@ export async function refreshAccessToken(refreshToken: string): Promise<{
 		}).toString(),
 	});
 
-	if (!response.ok) return null;
+	if (!response.ok) {
+		const err = await response.text().catch(() => "");
+		console.error(`[auth] Token exchange failed: ${response.status} ${err}`);
+		return null;
+	}
 	return response.json();
 }
 

src/routes/_auth/logout.tsx

@@ -8,7 +8,7 @@ const getLogoutConfigFn = createServerFn({ method: "GET" }).handler(
 		const dashboardUrl = process.env.DASHBOARD_URL || "http://localhost:4000";
 		const clientId = process.env.DASHBOARD_CLIENT_ID || "dashboard";
 		return {
-			endSessionUrl: `${LANYARD_URL}/api/auth/oauth2/endsession?client_id=${encodeURIComponent(clientId)}&post_logout_redirect_uri=${encodeURIComponent(`${dashboardUrl}/login`)}`,
+			endSessionUrl: `${LANYARD_URL}/api/auth/oauth2/end-session?client_id=${encodeURIComponent(clientId)}&post_logout_redirect_uri=${encodeURIComponent(`${dashboardUrl}/login`)}`,
 		};
 	},
 );

src/routes/api/auth/callback.tsx

@@ -24,7 +24,9 @@ export const Route = createFileRoute("/api/auth/callback")({
 						);
 					}
 
+					console.log("[auth/callback] Exchanging code for tokens...");
 					const tokens = await exchangeCodeForTokens(code, codeVerifier);
+					console.log("[auth/callback] Tokens result:", tokens ? "success" : "null");
 					if (!tokens) {
 						return new Response(
 							JSON.stringify({
@@ -67,7 +69,8 @@ export const Route = createFileRoute("/api/auth/callback")({
 							"Set-Cookie": cookie,
 						},
 					});
-				} catch {
+				} catch (err) {
+					console.error("[auth/callback] Error:", err);
 					return new Response(
 						JSON.stringify({ error: "Internal server error" }),
 						{