Update Facebook integration

Author: evercoinx

.env.example

@@ -6,7 +6,7 @@ NEXT_PUBLIC_GOOGLE_OAUTH_CLIENT_ID=<your-google-oauth-client-id>
 NEXT_PUBLIC_APPLE_OAUTH_CLIENT_ID=<your-apple-oauth-client-id>
 NEXT_PUBLIC_FACEBOOK_CLIENT_ID=<your-facebook-oauth-client-id>
 NEXT_PUBLIC_FACEBOOK_GRAPH_API_VERSION=21.0
-NEXT_PUBLIC_FACEBOOK_AUTH_VERSION=11.0
+NEXT_PUBLIC_FACEBOOK_AUTH_VERSION=21.0
 # Sensitive values ideally for server only
 
 ALCHEMY_API_KEY=

src/actions/turnkey.ts

@@ -58,24 +58,32 @@ export async function exchangeToken(code: string, codeVerifier: string) {
   const url = `https://graph.facebook.com/v${graphAPIVersion}/oauth/access_token`
 
   const clientID = env.NEXT_PUBLIC_FACEBOOK_CLIENT_ID
+  const clientSecret = env.FACEBOOK_APP_SECRET
   const redirectURI = `${siteConfig.url.base}/oauth-callback/facebook`
 
   const params = new URLSearchParams({
     client_id: clientID,
+    client_secret: clientSecret,
     redirect_uri: redirectURI,
     code: code,
     code_verifier: codeVerifier,
   })
 
   try {
-    const target = `${url}?${params.toString()}`
-
-    const response = await fetch(target, {
-      method: "GET",
+    const response = await fetch(url, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/x-www-form-urlencoded",
+      },
+      body: params.toString(),
     })
 
     if (!response.ok) {
-      throw new Error(`Token exchange failed: ${response.statusText}`)
+      const errorText = await response.text()
+      console.error("Facebook token exchange error:", errorText)
+      throw new Error(
+        `Token exchange failed: ${response.statusText} - ${errorText}`
+      )
     }
 
     const data = await response.json()

src/env.mjs

@@ -23,6 +23,7 @@ export const env = createEnv({
     NEXT_PUBLIC_VERCEL_PROJECT_PRODUCTION_URL: z.string().optional(),
     NEXT_PUBLIC_APP_URL: z.string().optional(),
     FACEBOOK_SECRET_SALT: z.string().min(1),
+    FACEBOOK_APP_SECRET: z.string().min(1),
     NEXT_PUBLIC_FACEBOOK_CLIENT_ID: z.string().min(1),
     NEXT_PUBLIC_FACEBOOK_GRAPH_API_VERSION: z.string().min(1),
     TURNKEY_API_PUBLIC_KEY: z.string().min(1),
@@ -52,6 +53,7 @@ export const env = createEnv({
     NEXT_PUBLIC_APP_URL: process.env.NEXT_PUBLIC_APP_URL,
     NEXT_PUBLIC_BASE_URL: process.env.NEXT_PUBLIC_BASE_URL,
     FACEBOOK_SECRET_SALT: process.env.FACEBOOK_SECRET_SALT,
+    FACEBOOK_APP_SECRET: process.env.FACEBOOK_APP_SECRET,
     TURNKEY_API_PUBLIC_KEY: process.env.TURNKEY_API_PUBLIC_KEY,
     TURNKEY_API_PRIVATE_KEY: process.env.TURNKEY_API_PRIVATE_KEY,
     NEXT_PUBLIC_ORGANIZATION_ID: process.env.NEXT_PUBLIC_ORGANIZATION_ID,