el.xwx.moe/pages/api/auth/[...nextauth].ts

import { prisma } from "@/lib/api/db";
import NextAuth from "next-auth/next";
import CredentialsProvider from "next-auth/providers/credentials";
import { AuthOptions, Session } from "next-auth";
import bcrypt from "bcrypt";
import EmailProvider from "next-auth/providers/email";
import { JWT } from "next-auth/jwt";
import { PrismaAdapter } from "@auth/prisma-adapter";
import { Adapter } from "next-auth/adapters";
import sendVerificationRequest from "@/lib/api/sendVerificationRequest";
import { Provider } from "next-auth/providers";

const providers: Provider[] = [
  CredentialsProvider({
    type: "credentials",
    credentials: {
      username: {
        label: "Username",
        type: "text",
      },
      password: {
        label: "Password",
        type: "password",
      },
    },
    async authorize(credentials, req) {
      if (!credentials) return null;

      const findUser = await prisma.user.findFirst({
        where: {
          OR: [
            {
              username: credentials.username.toLowerCase(),
            },
            {
              email: credentials.username.toLowerCase(),
            },
          ],
          emailVerified: { not: null },
        },
      });

      let passwordMatches: boolean = false;

      if (findUser?.password) {
        passwordMatches = bcrypt.compareSync(
          credentials.password,
          findUser.password
        );
      }

      if (passwordMatches) {
        return findUser;
      } else return null as any;
    },
  }),
];

if (process.env.EMAIL_SERVER && process.env.EMAIL_FROM)
  providers.push(
    EmailProvider({
      server: process.env.EMAIL_SERVER,
      from: process.env.EMAIL_FROM,
      maxAge: 600,
      sendVerificationRequest(params) {
        sendVerificationRequest(params);
      },
    })
  );

export const authOptions: AuthOptions = {
  adapter: PrismaAdapter(prisma) as Adapter,
  session: {
    strategy: "jwt",
  },
  providers,
  pages: {
    signIn: "/login",
  },
  callbacks: {
    session: async ({ session, token }: { session: Session; token: JWT }) => {
      session.user.id = parseInt(token.id as string);
      session.user.username = token.username as string;

      return session;
    },
    // Using the `...rest` parameter to be able to narrow down the type based on `trigger`
    jwt({ token, trigger, session, user }) {
      if (trigger === "signIn") {
        token.id = user.id;
        token.username = (user as any).username;
      } else if (trigger === "update" && session?.name && session?.username) {
        // Note, that `session` can be any arbitrary object, remember to validate it!
        token.name = session.name;
        token.username = session.username.toLowerCase();
        token.email = session.email.toLowerCase();
      }
      return token;
    },
  },
};

export default NextAuth(authOptions);