Saas-Teamspace/auth.ts

import NextAuth from 'next-auth'
import { PrismaAdapter } from '@auth/prisma-adapter'
import { UserRole } from '@prisma/client'
import { getUserById } from '@/data/user'
import { db } from '@/lib/db'
import authConfig from '@/auth.config'

// auth
export const {
  handlers: { GET, POST },

  auth, // This auth thing helps us get user info such as for display certain content for them and specific data
  signIn,
  signOut
} = NextAuth({
  // if there is an error, redirect to this page
  pages: {
    signIn: '/login',
    error: '/error'
  },
  // events to get emailverfiied if the user used Oauth
  events: {
    async linkAccount({ user }) {
      await db.user.update({
        where: { id: user.id },
        data: { emailVerified: new Date() }
      })
    }
  },
  // Callbacks allow us to customuzie the auth process such as who has access to what, get ID, and block users.
  callbacks: {
    // sign in
    async signIn({ user, account }) {
      // Allow OAuth without verification
      if (account?.provider !== 'credentials') return true

      // get exisiting user & restrict signin if they have not verified their email
      const exisitingUser = await getUserById(user.id ?? '')

      if (!exisitingUser?.emailVerified) return false

      return true
    },
    // token & session
    async session({ session, token }) {
      // if they have an id (sub) and user has been created, return it
      if (token.sub && session.user) {
        session.user.id = token.sub
      }

      // if they have a role and user has been created, return it
      if (token.role && session.user) {
        session.user.role = token.role as UserRole
      }

      return session
    },

    // jwt
    async jwt({ token }) {
      // fetch user
      if (!token.sub) return token

      const exisitingUser = await getUserById(token.sub)

      if (!exisitingUser) return token

      token.role = exisitingUser.role
      return token
    }
    // session userId
  },
  adapter: PrismaAdapter(db),
  session: { strategy: 'jwt' },
  ...authConfig
})