feat: implement credentials login

implements the credentials login functionality

src/auth.ts

@@ -1,24 +1,88 @@
-import NextAuth from 'next-auth';
+import NextAuth, { CredentialsSignin } from 'next-auth';
 
+import { Prisma } from '@/generated/prisma';
 import type { Provider } from 'next-auth/providers';
 import Credentials from 'next-auth/providers/credentials';
-
 import Authentik from 'next-auth/providers/authentik';
 
 import { PrismaAdapter } from '@auth/prisma-adapter';
 import { prisma } from '@/prisma';
 
+import { loginSchema } from './lib/validation/user';
+
+import { ZodError } from 'zod';
+
+class InvalidLoginError extends CredentialsSignin {
+  constructor(code: string) {
+    super();
+    this.code = code;
+    this.message = code;
+  }
+}
+
 const providers: Provider[] = [
   !process.env.DISABLE_PASSWORD_LOGIN &&
     Credentials({
       credentials: { password: { label: 'Password', type: 'password' } },
-      authorize(c) {
-        if (c.password !== 'password') return null;
-        return {
-          id: 'test',
-          name: 'Test User',
-          email: 'test@example.com',
-        };
+      async authorize(c) {
+        if (process.env.NODE_ENV === 'development' && c.password === 'password')
+          return {
+            id: 'test',
+            name: 'Test User',
+            email: 'test@example.com',
+          };
+        if (process.env.DISABLE_PASSWORD_LOGIN) return null;
+
+        try {
+          const { email, password } = await loginSchema.parseAsync(c);
+
+          const user = await prisma.user.findFirst({
+            where: { email },
+            include: { accounts: true },
+          });
+
+          if (!user)
+            throw new InvalidLoginError(
+              'username/email or password is not correct',
+            );
+
+          if (user.accounts[0].provider !== 'credentials') {
+            throw new InvalidLoginError(
+              'username/email or password is not correct',
+            );
+          }
+
+          const passwordsMatch = await (
+            await import('bcryptjs')
+          ).compare(password, user.password_hash!);
+
+          if (!passwordsMatch) {
+            throw new InvalidLoginError(
+              'username/email or password is not correct',
+            );
+          }
+
+          if (!user.emailVerified) {
+            throw new InvalidLoginError(
+              'Email not verified. Please check your inbox.',
+            );
+          }
+
+          return user;
+        } catch (error) {
+          if (
+            error instanceof Prisma?.PrismaClientInitializationError ||
+            error instanceof Prisma?.PrismaClientKnownRequestError
+          ) {
+            throw new InvalidLoginError('System error. Please contact support');
+          }
+
+          if (error instanceof ZodError) {
+            throw new InvalidLoginError(error.issues[0].message);
+          }
+
+          throw error;
+        }
       },
     }),
   process.env.AUTH_AUTHENTIK_ID && Authentik,
@@ -50,4 +114,5 @@ export const { handlers, signIn, signOut, auth } = NextAuth({
       return !!auth?.user;
     },
   },
+  debug: process.env.NODE_ENV === 'development',
 });