Add client-side OAuth recovery and surface explicit checkout/verification actions on Dashboard

[SaltProphet]

Motivation

• Recover OAuth flows when the server-side PKCE/code-verifier exchange fails so the client can retry the exchange.
• Make the session start prerequisites (credits / verification) explicitly actionable from the Dashboard to reduce user confusion.

Description

• Add a recoverable client-exchange check in the auth callback handler and redirect to the client with auth=oauth_client_exchange and the oauth_code when the server exchange fails due to missing verifier.
• Implement client-side handling for auth=oauth_client_exchange in getAuthRedirectUrl/page logic to perform supabase.auth.exchangeCodeForSession(oauthCode) and surface success or failure to the UI.
• Improve getAuthRedirectUrl origin selection logic and log a warning when NEXT_PUBLIC_SITE_URL differs from the runtime origin.
• Expose explicit verification and checkout actions in the DashboardView (new onStartVerification prop and UI buttons) and wire those into the app-level DashboardView props and tests.

Testing

• Updated and added unit tests in src/app/auth/callback/route.test.ts and src/app/__tests__/dashboard.test.tsx to cover the new client-exchange redirect behavior and dashboard verification/checkout actions, and they ran successfully.
• Ran the test suite with yarn test and all tests passed.

---

Codex Task

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
secpriva	Error		Mar 6, 2026 1:52am

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.