108 lines
2.9 KiB
TypeScript
108 lines
2.9 KiB
TypeScript
import { prisma } from "@/lib/api/db";
|
|
import NextAuth from "next-auth/next";
|
|
import CredentialsProvider from "next-auth/providers/credentials";
|
|
import { AuthOptions, Session } from "next-auth";
|
|
import bcrypt from "bcrypt";
|
|
import EmailProvider from "next-auth/providers/email";
|
|
import { JWT } from "next-auth/jwt";
|
|
import { PrismaAdapter } from "@auth/prisma-adapter";
|
|
import { Adapter } from "next-auth/adapters";
|
|
import sendVerificationRequest from "@/lib/api/sendVerificationRequest";
|
|
import { Provider } from "next-auth/providers";
|
|
|
|
let email;
|
|
|
|
const providers: Provider[] = [
|
|
CredentialsProvider({
|
|
type: "credentials",
|
|
credentials: {
|
|
username: {
|
|
label: "Username",
|
|
type: "text",
|
|
},
|
|
password: {
|
|
label: "Password",
|
|
type: "password",
|
|
},
|
|
},
|
|
async authorize(credentials, req) {
|
|
if (!credentials) return null;
|
|
|
|
const findUser = await prisma.user.findFirst({
|
|
where: {
|
|
OR: [
|
|
{
|
|
username: credentials.username.toLowerCase(),
|
|
},
|
|
{
|
|
email: credentials.username.toLowerCase(),
|
|
},
|
|
],
|
|
emailVerified: { not: null },
|
|
},
|
|
});
|
|
|
|
let passwordMatches: boolean = false;
|
|
|
|
if (findUser?.password) {
|
|
passwordMatches = bcrypt.compareSync(
|
|
credentials.password,
|
|
findUser.password
|
|
);
|
|
}
|
|
|
|
if (passwordMatches) {
|
|
return findUser;
|
|
} else return null as any;
|
|
},
|
|
}),
|
|
];
|
|
|
|
if (process.env.EMAIL_SERVER && process.env.EMAIL_FROM)
|
|
providers.push(
|
|
EmailProvider({
|
|
server: process.env.EMAIL_SERVER,
|
|
from: process.env.EMAIL_FROM,
|
|
maxAge: 600,
|
|
sendVerificationRequest(params) {
|
|
email = params.identifier;
|
|
sendVerificationRequest(params);
|
|
},
|
|
})
|
|
);
|
|
|
|
export const authOptions: AuthOptions = {
|
|
adapter: PrismaAdapter(prisma) as Adapter,
|
|
session: {
|
|
strategy: "jwt",
|
|
},
|
|
providers,
|
|
pages: {
|
|
signIn: "/login",
|
|
verifyRequest: "/confirmation",
|
|
},
|
|
callbacks: {
|
|
session: async ({ session, token }: { session: Session; token: JWT }) => {
|
|
session.user.id = parseInt(token.id as string);
|
|
session.user.username = token.username as string;
|
|
|
|
return session;
|
|
},
|
|
// Using the `...rest` parameter to be able to narrow down the type based on `trigger`
|
|
jwt({ token, trigger, session, user }) {
|
|
if (trigger === "signIn") {
|
|
token.id = user.id;
|
|
token.username = (user as any).username;
|
|
} else if (trigger === "update" && session?.name && session?.username) {
|
|
// Note, that `session` can be any arbitrary object, remember to validate it!
|
|
token.name = session.name;
|
|
token.username = session.username.toLowerCase();
|
|
token.email = session.email.toLowerCase();
|
|
}
|
|
return token;
|
|
},
|
|
},
|
|
};
|
|
|
|
export default NextAuth(authOptions);
|