Meta / Oculus SSO Portal

// Cloudflare Worker index.js for Oculus Meta SSO
export default {
  async fetch(request, env, ctx) {
    const url = new URL(request.url);
    const corsHeaders = {
      "Access-Control-Allow-Origin": "*",
      "Access-Control-Allow-Methods": "GET, POST, OPTIONS",
      "Access-Control-Allow-Headers": "Content-Type"
    };

    if (request.method === "OPTIONS") return new Response(null, { headers: corsHeaders });

    if (url.pathname === "/api/sso-url") {
      const redirectUri = url.searchParams.get("redirect_uri") || "https://game.n4te.dev/";
      return new Response(JSON.stringify({
        sso_url: `https://auth.oculus.com/sso/?redirect_uri=${encodeURIComponent(redirectUri)}&organization_id=${env.ORGANIZATION_ID}`
      }), { headers: { ...corsHeaders, "Content-Type": "application/json" } });
    }

    if (url.pathname === "/api/verify" && request.method === "POST") {
      const { user_token, user_id } = await request.json();
      // Verifies user_token via graph.oculus.com or server-to-server proof...
      return new Response(JSON.stringify({ verified: true, user_id }), { headers: corsHeaders });
    }
  }
}