116 lines
3.2 KiB
TypeScript
116 lines
3.2 KiB
TypeScript
import NextAuth, { CredentialsSignin } from 'next-auth';
|
|
|
|
import { Prisma } from '@/generated/prisma';
|
|
import type { Provider } from 'next-auth/providers';
|
|
import Credentials from 'next-auth/providers/credentials';
|
|
import Authentik from 'next-auth/providers/authentik';
|
|
|
|
import { PrismaAdapter } from '@auth/prisma-adapter';
|
|
import { prisma } from '@/prisma';
|
|
|
|
import { loginSchema } from './validation';
|
|
|
|
import { ZodError } from 'zod';
|
|
import bcrypt from 'bcryptjs';
|
|
|
|
class InvalidLoginError extends CredentialsSignin {
|
|
constructor(code: string) {
|
|
super();
|
|
this.code = code;
|
|
this.message = code;
|
|
}
|
|
}
|
|
|
|
const providers: Provider[] = [
|
|
!process.env.DISABLE_PASSWORD_LOGIN &&
|
|
Credentials({
|
|
credentials: { password: { label: 'Password', type: 'password' } },
|
|
async authorize(c) {
|
|
if (process.env.NODE_ENV === 'development' && c.password === 'password')
|
|
return {
|
|
id: 'test',
|
|
name: 'Test User',
|
|
email: 'test@example.com',
|
|
};
|
|
if (process.env.DISABLE_PASSWORD_LOGIN) return null;
|
|
|
|
try {
|
|
const { email, password } = await loginSchema.parseAsync(c);
|
|
|
|
const user = await prisma.user.findFirst({
|
|
where: { email },
|
|
include: { accounts: true },
|
|
});
|
|
|
|
if (!user)
|
|
throw new InvalidLoginError('email or password is not correct');
|
|
|
|
if (user.accounts[0].provider !== 'credentials') {
|
|
throw new InvalidLoginError(
|
|
`Please sign in with ${user.accounts[0].provider}`,
|
|
);
|
|
}
|
|
|
|
const passwordsMatch = await bcrypt.compare(
|
|
password,
|
|
user.password_hash!,
|
|
);
|
|
|
|
if (!passwordsMatch) {
|
|
throw new InvalidLoginError('email or password is not correct');
|
|
}
|
|
|
|
if (!user.emailVerified) {
|
|
throw new InvalidLoginError(
|
|
'Email not verified. Please check your inbox.',
|
|
);
|
|
}
|
|
|
|
return user;
|
|
} catch (error) {
|
|
if (
|
|
error instanceof Prisma?.PrismaClientInitializationError ||
|
|
error instanceof Prisma?.PrismaClientKnownRequestError
|
|
) {
|
|
throw new InvalidLoginError('System error. Please contact support');
|
|
}
|
|
|
|
if (error instanceof ZodError) {
|
|
throw new InvalidLoginError(error.issues[0].message);
|
|
}
|
|
|
|
throw error;
|
|
}
|
|
},
|
|
}),
|
|
process.env.AUTH_AUTHENTIK_ID && Authentik,
|
|
].filter(Boolean) as Provider[];
|
|
|
|
export const providerMap = providers
|
|
.map((provider) => {
|
|
if (typeof provider === 'function') {
|
|
const providerData = provider();
|
|
return { id: providerData.id, name: providerData.name };
|
|
} else {
|
|
return { id: provider.id, name: provider.name };
|
|
}
|
|
})
|
|
.filter((provider) => provider.id !== 'credentials');
|
|
|
|
export const { handlers, signIn, signOut, auth } = NextAuth({
|
|
providers,
|
|
adapter: PrismaAdapter(prisma),
|
|
session: {
|
|
strategy: 'jwt',
|
|
},
|
|
pages: {
|
|
signIn: '/login',
|
|
signOut: '/logout',
|
|
},
|
|
callbacks: {
|
|
authorized({ auth }) {
|
|
return !!auth?.user;
|
|
},
|
|
},
|
|
debug: process.env.NODE_ENV === 'development',
|
|
});
|