How can I integrate zenstack with Lucia Auth?

[cesalberca]

I'm evaluating zenstack as a possible solution for an app I'm developing. Right now I'm using Lucia and I was wondering how could I integrate it with zenstack. Is it possible?

[ymc9]

Hi @cesalberca . Thanks for considering ZenStack. A guide for Lucia has been a to-do item for a while, but unfortunately, we haven't got time to work on it yet. It should definitely be possible (and not difficult) since the way ZenStack connects to an auth system is quite straightforward.

Do you have a sharable Lucia + Prisma full-stack project already? If so, maybe we can collaborate to work out such a guide together based on it?

[ymc9]

@ymc9 I just updated the project to use the enhance function and generated code with the tRPC plugin. Since I'm using tRPC and Nuxt I don't know which configuration to apply. I've been following the doc guides, however now I'm missing the next step

I see that your ZModel has the trpc plugin set up. With that, the trpc CRUD procedures are generated into the output directory. You can call the generated createRouter function to get a route object. You can use it directly as your root router, or merge it with other manually implemented routers to form an API hierarchy.

We don't have a Nuxt sample for using trpc yet, but here's a Next.js one that may be helpful: https://github.com/zenstackhq/sample-todo-trpc

[cesalberca]

Hi! I've successfully integrated Zenstack! I opted not to use the generator for now. I have a couple of questions:

1. I have in the context the following code:

export const createContext = async (event: H3Event) => {
  return {
    user: event.context.user,
    ...(event.context.user
      ? {
          prisma: enhance(prisma, {
            user: {
              ...event.context.user,
              id: event.context.user?.id,
            },
          }),
        }
      : {}),
  };
};

I'm checking if the user is authenticated in order to provide with the prisma instance in the context. Is this correct?

2. I have set in the router a publicProcedure and a protectedProcedure. Given that Zenstack integrates with Lucia, is the protectedProcedure really necessary? Or should I just rely on setting the authentication with auth()?

It would also be super helpful if you could check if I'm doing something wrong. Also, what would be ideal for the documentation? You want move and adapt the repo inside your org? Thanks @ymc9!

[ymc9]

Great to know the progress!

For #1, if your app allows "anonymous" users, you can pass undefined to the user object when calling enhance to represent an anonymous users. Inside ZModel, use auth() == null to check if the user is anonymous. I'm not sure if this is what you wanted to ask.

For #2, you can continue having an auth middleware and a protectedProcedure, depending on your needs. Usually you want to have all authorization rules inside ZModel, and the auth middleware can do basic guarding like rejecting anonymous user, etc.

It's great to see a Lucia sample project working with ZenStack! I'd love to have a guide document on the website based on the approach. Do you intend to keep this project publicly available? If so, maybe let's just link it from the doc?

Also, please let me know if you're interested in writing the guide. I know people are busy, but if you want to, I'll be very happy to facilitate. The docs repo is here: https://github.com/zenstackhq/zenstack-docs It's also completely fine if you want to leave the job to me.

Thank you for continue working on it!

[cesalberca]

#1: Yes, Ok!
#2: Ok!

Yeah, we plan on keeping the project Open Source, so we can totally link it from the docs! I'll write a basic guide and maybe we can expand it bit by bit. I'll create a PR when I have something!

[ymc9]

Great! Thank you very much!