55 lines
1.6 KiB
TypeScript
55 lines
1.6 KiB
TypeScript
|
import type { NextAuthOptions } from "next-auth";
|
||
|
|
import CredentialsProvider from "next-auth/providers/credentials";
|
||
|
|
import bcrypt from "bcryptjs";
|
||
|
|
import { getDb, type UserRow } from "./db";
|
||
|
|
|
||
|
|
export const authOptions: NextAuthOptions = {
|
||
|
|
secret: process.env.NEXTAUTH_SECRET || "nexredirect-dev-secret-please-change",
|
||
|
|
session: { strategy: "jwt", maxAge: 30 * 24 * 60 * 60 },
|
||
|
|
pages: { signIn: "/login" },
|
||
|
|
providers: [
|
||
|
|
CredentialsProvider({
|
||
|
|
name: "Credentials",
|
||
|
|
credentials: {
|
||
|
|
email: { label: "E-Mail", type: "email" },
|
||
|
|
password: { label: "Passwort", type: "password" },
|
||
|
|
},
|
||
|
|
async authorize(credentials) {
|
||
|
|
if (!credentials?.email || !credentials?.password) return null;
|
||
|
|
const email = credentials.email.toLowerCase().trim();
|
||
|
|
|
||
|
|
const user = getDb()
|
||
|
|
.prepare("SELECT id, email, password_hash, role, created_at FROM users WHERE email = ? LIMIT 1")
|
||
|
|
.get(email) as UserRow | undefined;
|
||
|
|
|
||
|
|
if (!user) return null;
|
||
|
|
const valid = await bcrypt.compare(credentials.password, user.password_hash);
|
||
|
|
if (!valid) return null;
|
||
|
|
|
||
|
|
return {
|
||
|
|
id: String(user.id),
|
||
|
|
email: user.email,
|
||
|
|
name: user.email,
|
||
|
|
role: user.role,
|
||
|
|
};
|
||
|
|
},
|
||
|
|
}),
|
||
|
|
],
|
||
|
|
callbacks: {
|
||
|
|
async jwt({ token, user }) {
|
||
|
|
if (user) {
|
||
|
|
token.id = user.id;
|
||
|
|
token.role = user.role;
|
||
|
|
}
|
||
|
|
return token;
|
||
|
|
},
|
||
|
|
async session({ session, token }) {
|
||
|
|
if (session.user) {
|
||
|
|
session.user.id = token.id;
|
||
|
|
session.user.role = token.role;
|
||
|
|
}
|
||
|
|
return session;
|
||
|
|
},
|
||
|
|
},
|
||
|
|
};
|