diff --git a/necchange/src/app/api/auth/[...nextauth]/route.js b/necchange/src/app/api/auth/[...nextauth]/route.js index 344f3dc..0a907d6 100644 --- a/necchange/src/app/api/auth/[...nextauth]/route.js +++ b/necchange/src/app/api/auth/[...nextauth]/route.js @@ -8,6 +8,17 @@ const handler = async (req, context) => { return new Response(null, { status: 200 }); } + // Macete para rejeitar emails vindos do postmaster, + // por algum motivo o postmaster insiste em chamar esta api com o arugmento "callbackUrl" que já não é utilizado, + // mas que no entanto invalida o token de verificaçao. + const url = new URL(req.url); + const hasCallbackUrl = url.searchParams.has("callbackUrl"); + + if (url.pathname === "/api/auth/callback/email" && hasCallbackUrl) { + console.warn("Blocked automated request with callbackUrl:", url.searchParams.get("callbackUrl")); + return new Response(null, { status: 200 }); + } + return await NextAuth(req, context, authOptions); };