@ -8,17 +8,13 @@ import {
import GoogleProvider from "@auth/core/providers/google" ; import GoogleProvider from "@auth/core/providers/google" ;
import type { Session } from "@auth/core/types" ; import type { Session } from "@auth/core/types" ;
// TODO: stop using universal-middleware and directly integrate server middlewares instead and/or use vike-server https://vike.dev/server. (Bati generates boilerplates that use universal-middleware https://github.com/magne4000/universal-middleware to make Bati's internal logic easier. This is temporary and will be removed soon.)
// TODO: stop using universal-middleware and directly integrate server middlewares instead and/or use vike-server https://vike.dev/server. (Bati generates boilerplates that use universal-middleware https://github.com/magne4000/universal-middleware to make Bati's internal logic easier. This is temporary and will be removed soon.)
import type { import {
Get ,
type Get ,
UniversalHandler ,
type UniversalHandler ,
UniversalMiddleware ,
type UniversalMiddleware ,
env as getEnv ,
} from "@universal-middleware/core" ; } from "@universal-middleware/core" ;
import { env } from "./env.js" ;
import { getDbClient } from "../database/index.js" ; import { getDbClient } from "../database/index.js" ;
import { JWT } from "@auth/core/jwt" ;
const POSTGRES_CONNECTION_STRING =
"postgres://neondb_owner:npg_sOVmj8vWq2zG@ep-withered-king-adiz9gpi-pooler.c-2.us-east-1.aws.neon.tech:5432/neondb?sslmode=require&channel_binding=true" ;
if ( ! globalThis . crypto ) { if ( ! globalThis . crypto ) {
/ * *
/ * *
@ -33,111 +29,114 @@ if (!globalThis.crypto) {
} ) ;
} ) ;
} }
const authjsConfig = { const authjsConfig = ( env : Record < string , string > ) = >
basePath : "/api/auth" ,
( {
trustHost : Boolean (
basePath : "/api/auth" ,
env . AUTH_TRUST_HOST ? ? env . VERCEL ? ? env . NODE_ENV !== "production"
// trustHost: Boolean(
) ,
// env.AUTH_TRUST_HOST ?? env.VERCEL ?? env.NODE_ENV !== "production"
// TODO: Replace secret {@see https://authjs.dev/reference/core#secret}
// ),
secret : "buginoo" ,
trustHost : true ,
providers : [
// TODO: Replace secret {@see https://authjs.dev/reference/core#secret}
// TODO: Choose and implement providers
secret : env.AUTHJS_SECRET ,
// CredentialsProvider({
providers : [
// name: "Credentials",
// TODO: Choose and implement providers
// credentials: {
// CredentialsProvider({
// username: { label: "Username", type: "text", placeholder: "jsmith" },
// name: "Credentials",
// password: { label: "Password", type: "password" },
// credentials: {
// },
// username: { label: "Username", type: "text", placeholder: "jsmith" },
// async authorize() {
// password: { label: "Password", type: "password" },
// // Add logic here to look up the user from the credentials supplied
// },
// const user = {
// async authorize() {
// id: "019900bb-61b3-7333-b760-b27784dfe33b",
// // Add logic here to look up the user from the credentials supplied
// name: "J Smith",
// const user = {
// email: "jsmith@example.com",
// id: "019900bb-61b3-7333-b760-b27784dfe33b",
// };
// name: "J Smith",
// email: "jsmith@example.com",
// };
// // Any object returned will be saved in `user` property of the JWT
// // Any object returned will be saved in `user` property of the JWT
// // If you return null then an error will be displayed advising the user to check their details.
// // If you return null then an error will be displayed advising the user to check their details.
// // You can also Reject this callback with an Error thus the user will be sent to the error page with the error message as a query parameter
// // You can also Reject this callback with an Error thus the user will be sent to the error page with the error message as a query parameter
// return user ?? null;
// return user ?? null;
// },
// },
// }),
// }),
GoogleProvider ( {
GoogleProvider ( {
clientId :
clientId : env.GOOGLE_CLIENT_ID ,
"697711350664-t6237s5n3ttjd1npp1qif1aupptkr0va.apps.googleusercontent.com" ,
clientSecret : env.GOOGLE_CLIENT_SECRET ,
clientSecret : "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" ,
} ) ,
} ) ,
] ,
] ,
callbacks : {
callbacks : {
async signIn ( { user , account , profile } ) {
async signIn ( { user , account , profile } ) {
if ( typeof user ? . email !== "string" ) return false ;
if ( typeof user ? . email !== "string" ) return false ;
//@ts-ignore
const dbClient = await getDbClient ( POSTGRES_CONNECTION_STRING ) ;
const dbClient = await getDbClient ( env . POSTGRES_CONNECTION_STRING ) ;
let userFromDb = await dbClient
let userFromDb = await dbClient
. selectFrom ( "users" )
. selectFrom ( "users" )
. selectAll ( )
. selectAll ( )
. where ( "email" , "=" , user . email )
. where ( "email" , "=" , user . email )
. executeTakeFirst ( ) ;
. executeTakeFirst ( ) ;
if ( ! userFromDb ) {
if ( ! userFromDb ) {
userFromDb = (
userFromDb = (
await dbClient
await dbClient
. insertInto ( "users" )
. insertInto ( "users" )
. values ( {
. values ( {
email : user.email ,
email : user.email ,
username : user.email ,
username : user.email ,
password : null ,
password : null ,
createdAt : null ,
createdAt : null ,
lastLogin : null ,
lastLogin : null ,
} )
} )
. returningAll ( )
. returningAll ( )
. execute ( )
. execute ( )
) [ 0 ] ;
) [ 0 ] ;
}
}
console . log ( "signIn" , user , account , profile ) ;
console . log ( "signIn" , user , account , profile ) ;
return true ;
return true ;
} ,
} ,
jwt : async ( { token } ) = > {
jwt : async ( { token } ) = > {
if ( typeof token ? . email !== "string" ) return token ;
if ( typeof token ? . email !== "string" ) return token ;
const dbClient = await getDbClient ( POSTGRES_CONNECTION_STRING ) ;
//@ts-ignore
let userFromDb = await dbClient
const dbClient = await getDbClient ( env . POSTGRES_CONNECTION_STRING ) ;
. selectFrom ( "users" )
let userFromDb = await dbClient
. selectAll ( )
. selectFrom ( "users" )
. where ( "email" , "=" , token . email || "" )
. selectAll ( )
. executeTakeFirst ( ) ;
. where ( "email" , "=" , token . email || "" )
/ * * T O D O : t h e f o l l o w i n g s h o u l d n e v e r h a p p e n , b e c a u s e t h e a c c o u n t i n
. executeTakeFirst ( ) ;
* created in the ` isgnIn ` step ; but I don ' t know what error to throw here
/ * * T O D O : t h e f o l l o w i n g s h o u l d n e v e r h a p p e n , b e c a u s e t h e a c c o u n t i n
* if for some reason there is no such account . * /
* created in the ` isgnIn ` step ; but I don ' t know what error to throw here
if ( ! userFromDb ) {
* if for some reason there is no such account . * /
userFromDb = (
if ( ! userFromDb ) {
await dbClient
userFromDb = (
. insertInto ( "users" )
await dbClient
. values ( {
. insertInto ( "users" )
email : token.email ,
. values ( {
username : token.email ,
email : token.email ,
password : null ,
username : token.email ,
createdAt : null ,
password : null ,
lastLogin : null ,
createdAt : null ,
} )
lastLogin : null ,
. returningAll ( )
} )
. execute ( )
. returningAll ( )
) [ 0 ] ;
. execute ( )
}
) [ 0 ] ;
return {
}
. . . token ,
return {
id : userFromDb?.id || "" ,
. . . token ,
} ;
id : userFromDb?.id || "" ,
} ,
} ;
session : ( { token , session } ) = > {
} ,
return {
session : ( { token , session } ) = > {
. . . session ,
return {
user : {
. . . session ,
. . . session . user ,
user : {
id : token.id as string ,
. . . session . user ,
} ,
id : token.id as string ,
jwt : token ,
} ,
} ;
jwt : token ,
} ;
} ,
} ,
} ,
} ,
} satisfies Omit < AuthConfig , " raw " > ) ;
} satisfies Omit < AuthConfig , " raw " > ;
/ * * / * *
* Retrieve Auth . js session from Request
* Retrieve Auth . js session from Request
@ -175,11 +174,15 @@ export async function getSession(
* @link { @see https : //authjs.dev/getting-started/session-management/get-session}
* @link { @see https : //authjs.dev/getting-started/session-management/get-session}
* * /
* * /
export const authjsSessionMiddleware : Get < [ ] , UniversalMiddleware > = export const authjsSessionMiddleware : Get < [ ] , UniversalMiddleware > =
( ) = > async ( request , context ) = > {
( ) = > async ( request , context , runtime ) = > {
const env = getEnv ( runtime ) ;
try {
try {
return {
return {
. . . context ,
. . . context ,
session : await getSession ( request , authjsConfig ) ,
session : await getSession (
request ,
authjsConfig ( env as Record < string , string > )
) ,
} ;
} ;
} catch ( error ) {
} catch ( error ) {
console . debug ( "authjsSessionMiddleware:" , error ) ;
console . debug ( "authjsSessionMiddleware:" , error ) ;
@ -194,6 +197,7 @@ export const authjsSessionMiddleware: Get<[], UniversalMiddleware> =
* Auth . js route
* Auth . js route
* @link { @see https : //authjs.dev/getting-started/installation}
* @link { @see https : //authjs.dev/getting-started/installation}
* * /
* * /
export const authjsHandler = ( ( ) = > async ( request ) = > { export const authjsHandler = ( ( ) = > async ( request , context , runtime ) = > {
return Auth ( request , authjsConfig ) ;
const env = getEnv ( runtime ) ;
return Auth ( request , authjsConfig ( env as Record < string , string > ) ) ;
} ) satisfies Get < [ ] , UniversalHandler > ; } ) satisfies Get < [ ] , UniversalHandler > ;
Avraham Sakal