 { SECURE_ARTSY_URL, ARTSY_ID, ARTSY_SECRET, APP_URL } = require('../../config')
 { parse } = require 'url'
 qs = require 'querystring'
+
+getRedirectTo = (req) ->
+  req.body['redirect-to'] or req.query['redirect-to'] or req.query['redirect_uri'] or parse(req.get('Referrer') or '').path or '/'
 
 @submitLogin = (req, res) ->
   res.send { success: true, error: res.authError, user: req.user?.toJSON() }

  unless req.user
    return res.redirect '/log_in?error=no-user-access-token'

  redirectTo = req.body['redirect-to'] or req.query['redirect-to'] or
               parse(req.get('Referrer') or '').path or '/'
  request
    .post("#{SECURE_ARTSY_URL}/api/v1/me/trust_token")
    .send(access_token: req.user.get 'accessToken')

      # Delete all connect cookies - we have some under artsy.net and others under .artsy.net.
      res.clearCookie 'connect.sess'
      req.login new CurrentUser(accessToken: response?.body.access_token), ->
        res.redirect getRedirectTo(req)
  )

@twitterLastStep = (req, res) ->
