feature: Next Auth Adapter (#4046)

* initial working

* add user side callback control

* connect to blitz-auth

* better error handling

* initial working after submodule

* Create fast-adults-guess.md

* add submodule init and update to workflow

* remove internal folder

* cleanup

* ignore tests from next-auth

* add redirectUrl config and maintin consistency

* move required files back to internals folder

* remove submodule cloning

* Patch NextAuth

another time

fix import issue

fix import

add path imports for the adapters

Revert "add to blitz-auth"

This reverts commit 246e62f.

add to blitz-auth

pnpm lock fix

cleanup

fix codegen

remove nextauth submodule and internal folder and patch nextauth

* Revert "Patch NextAuth"

This reverts commit 31888fc.

* switch

* DRY

* optional peerDependency

* Delete .gitmodules

* make it work with webpack alias

* fix

* split to new path

* undo unnecessary changes

* more fixes

* add strong typing to nextauth adapter (#4104)

* add strong typing to nextauth adapter

* cleanup

---------

Co-authored-by: Brandon Bayer <b@bayer.ws>

.changeset/fast-adults-guess.md

@@ -0,0 +1,6 @@
+---
+"@blitzjs/auth": minor
+"blitz": minor
+---
+
+feature: Next Auth Adapter

apps/toolkit-app/next.config.js

@@ -1,8 +1,4 @@
-// @ts-check
-
-const withBundleAnalyzer = require("@next/bundle-analyzer")({
-  enabled: process.env.ANALYZE === "true",
-})
+const { withNextAuthAdapter } = require("@blitzjs/auth/next-auth")
 const { withBlitz } = require("@blitzjs/next")
 
 /**
@@ -12,4 +8,4 @@ const config = {
   reactStrictMode: true,
 }
 
-module.exports = withBlitz(withBundleAnalyzer(config))
+module.exports = withBlitz(withNextAuthAdapter(config))

apps/toolkit-app/package.json

@@ -33,6 +33,7 @@
     "@prisma/client": "4.6.1",
     "blitz": "workspace:2.0.0-beta.23",
     "next": "12.2.5",
+    "next-auth": "4.18.7",
     "prisma": "4.6.1",
     "react": "18.2.0",
     "react-dom": "18.2.0",

apps/toolkit-app/src/custom-plugin/plugin.ts

@@ -22,7 +22,6 @@ export const BlitzCustomPlugin = createClientPlugin<CustomPluginOptions, {}>(
       middleware: {
         beforeHttpRequest: (req) => {
           //make changes to the request options before RPC call
-          req.headers = { ...req.headers, ...{ customHeader: "customHeaderValue" } }
           return req
         },
         beforeHttpResponse: (res) => {

apps/toolkit-app/src/pages/api/auth/[...nextauth].ts

@@ -0,0 +1,43 @@
+import { api } from "src/blitz-server"
+import GithubProvider from "next-auth/providers/github"
+import { NextAuthAdapter, BlitzNextAuthOptions } from "@blitzjs/auth/next-auth"
+import db, { User } from "db"
+import { Role } from "types"
+
+// Has to be defined separately for `profile` to be correctly typed below
+const providers = [
+  GithubProvider({
+    clientId: process.env.GITHUB_CLIENT_ID as string,
+    clientSecret: process.env.GITHUB_CLIENT_SECRET as string,
+  }),
+]
+
+export default api(
+  NextAuthAdapter({
+    successRedirectUrl: "/",
+    errorRedirectUrl: "/error",
+    providers,
+    callback: async (user, account, profile, session) => {
+      console.log("USER SIDE PROFILE_DATA", { user, account, profile })
+      let newUser: User
+      try {
+        newUser = await db.user.findFirstOrThrow({ where: { name: { equals: user.name } } })
+      } catch (e) {
+        newUser = await db.user.create({
+          data: {
+            email: user.email as string,
+            name: user.name as string,
+            role: "USER",
+          },
+        })
+      }
+      const publicData = {
+        userId: newUser.id,
+        role: newUser.role as Role,
+        source: "github",
+      }
+      await session.$create(publicData)
+      return { redirectUrl: "/" }
+    },
+  })
+)

apps/toolkit-app/src/pages/index.tsx

@@ -4,7 +4,8 @@ import Layout from "src/core/layouts/Layout"
 import { useCurrentUser } from "src/users/hooks/useCurrentUser"
 import logout from "src/auth/mutations/logout"
 import { useMutation } from "@blitzjs/rpc"
-import { Routes, BlitzPage } from "@blitzjs/next"
+import { BlitzPage } from "@blitzjs/next"
+import { Routes } from ".blitz"
 import styles from "src/styles/Home.module.css"
 
 /*
@@ -43,6 +44,11 @@ const UserInfo = () => {
         <Link href={Routes.LoginPage()} className={styles.loginButton}>
           <strong>Login</strong>
         </Link>
+        <Link href="/api/auth/github/login" passHref>
+          <a className="button small">
+            <strong>Sign in with GitHub</strong>
+          </a>
+        </Link>
       </>
     )
   }

packages/blitz-auth/.eslintignore

@@ -0,0 +1 @@
+src/server/adapters/next-auth/next-auth

packages/blitz-auth/build.config.ts

@@ -1,7 +1,12 @@
 import {BuildConfig} from "unbuild"
 
 const config: BuildConfig = {
-  entries: ["./src/index-browser", "./src/index-server","./src/server/secure-password"],
+  entries: [
+    "./src/index-browser",
+    "./src/index-server",
+    "./src/server/secure-password",
+    "./src/server/adapters/next-auth",
+  ],
   externals: ["index-browser.cjs", "index-browser.mjs", "react"],
   declaration: true,
   rollup: {

packages/blitz-auth/next-auth.d.ts

@@ -0,0 +1 @@
+export * from "./dist/next-auth"

packages/blitz-auth/next-auth.js

@@ -0,0 +1 @@
+module.exports = require("./dist/next-auth.cjs")

packages/blitz-auth/package.json

@@ -28,6 +28,7 @@
   "dependencies": {
     "@types/b64-lite": "1.3.0",
     "@types/cookie-session": "2.0.44",
+    "@types/oauth": "0.9.1",
     "@types/passport": "1.0.7",
     "@types/secure-password": "3.1.1",
     "b64-lite": "1.4.0",
@@ -38,18 +39,24 @@
     "http": "0.0.1-security",
     "jsonwebtoken": "9.0.0",
     "nanoid": "3.2.0",
+    "oauth": "0.10.0",
+    "openid-client": "5.2.1",
     "passport": "0.6.0",
     "path": "0.12.7",
     "supports-color": "8.1.1",
     "url": "0.11.0"
   },
   "peerDependencies": {
     "blitz": "2.0.0-beta.23",
+    "next-auth": "4.18.7",
     "secure-password": "4.0.0"
   },
   "peerDependenciesMeta": {
     "secure-password": {
       "optional": true
+    },
+    "next-auth": {
+      "optional": true
     }
   },
   "devDependencies": {
@@ -62,6 +69,7 @@
     "@types/react": "18.0.25",
     "@types/react-dom": "17.0.14",
     "blitz": "2.0.0-beta.23",
+    "next-auth": "4.18.7",
     "react": "18.2.0",
     "react-dom": "18.2.0",
     "secure-password": "4.0.0",

packages/blitz-auth/src/server/adapters/index.ts

@@ -0,0 +1 @@
+export * from "./passport/adapter"

packages/blitz-auth/src/server/adapters/next-auth.ts

@@ -0,0 +1,3 @@
+export * from "./next-auth/adapter"
+export * from "./next-auth/types"
+export * from "./next-auth/webpack"