-
Notifications
You must be signed in to change notification settings - Fork 0
/
auth.ts
96 lines (87 loc) · 2.71 KB
/
auth.ts
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
import NextAuth, { DefaultSession } from 'next-auth';
import authConfig from './auth.config';
import { PrismaAdapter } from '@auth/prisma-adapter';
import prisma from './lib/prisma';
import { getUserById } from './data/user';
import { getTwoFactorConfirmationByUserId } from './data/two-factor-confirmation';
import { getAccountByUserId } from './data/account';
import { getCartByUserId } from './data/cart';
import { productSchema } from './components/types';
export const {
handlers: { GET, POST },
auth,
signIn,
signOut,
} = NextAuth({
pages: {
signIn: '/account/login',
error: '/account/error',
},
callbacks: {
async signIn({ user, account }) {
if (account?.provider !== 'credentials') return true;
const existingUser = await getUserById(user.id);
if (!existingUser?.emailVerified) return false;
if (existingUser.isTwoFactorEnabled) {
const twoFactorConfirmation = await getTwoFactorConfirmationByUserId(
existingUser.id
);
if (!twoFactorConfirmation) return false;
await prisma.twoFactorConfirmation.delete({
where: { id: twoFactorConfirmation.id },
});
}
return true;
},
async session({ session, token }) {
// console.log({
// sessionToken: token,
// });
if (token.sub && session.user) {
session.user.id = token.sub;
}
if (token.role && session.user) {
session.user.role = token.role as 'ADMIN' | 'USER';
}
if (session.user) {
session.user.isTwoFactorEnabled = token.isTwoFactorEnabled as boolean;
}
if (session.user) {
session.user.name = token.name;
session.user.email = token.email;
session.user.isOAuth = token.isOAuth as boolean;
session.user.cart = token.cart as productSchema[];
}
return session;
},
async jwt({ token }) {
if (!token.sub) {
return token;
}
const existingUser = await getUserById(token.sub);
if (!existingUser) {
return token;
}
const existingAccount = await getAccountByUserId(existingUser.id);
const existingCart = await getCartByUserId(existingUser.id);
token.isOAuth = !!existingAccount;
token.name = existingUser.name;
token.email = existingUser.email;
token.role = existingUser.role;
token.isTwoFactorEnabled = existingUser.isTwoFactorEnabled;
token.cart = existingCart;
return token;
},
},
events: {
async linkAccount({ user }) {
await prisma.user.update({
where: { id: user.id },
data: { emailVerified: new Date() },
});
},
},
adapter: PrismaAdapter(prisma),
session: { strategy: 'jwt' },
...authConfig,
});