feat(signin): check for authorization in sign in

src/lib/staffLogins.ts

@@ -0,0 +1,24 @@
+const staffLogins = [
+  "adnan",
+  "yassin",
+  "giuseppe",
+  "charifa",
+  "hasnaa",
+  "ef-zed",
+  "lahsen",
+  "amine",
+  "hanane",
+  "ybouthir",
+  "scar",
+  "hind",
+  "mystic",
+  "q-beast",
+  "spoody",
+  "toxiic",
+  "sopu",
+  "hajar",
+  "mahjoub",
+  "larbi",
+];
+
+export { staffLogins as default };

src/pages/api/auth/[...nextauth].ts

@@ -4,6 +4,7 @@ import FortyTwoProvider, {
 } from "next-auth/providers/42-school";
 import prisma from "../../../lib/prisma/client";
 import { PrismaAdapter } from "@next-auth/prisma-adapter";
+import staffLogins from "../../../lib/staffLogins";
 
 export interface authUser {
   id: string;
@@ -32,8 +33,22 @@ export default NextAuth({
     }),
   ],
   callbacks: {
-    async signIn() {
-      return true;
+    async signIn({ profile: profileWithNoType }) {
+      const profile: FortyTwoProfile = profileWithNoType as any;
+
+      const isStaff = staffLogins.some(
+        (staffLogin) => profile.login === staffLogin,
+      );
+
+      if (isStaff) return true;
+
+      const fromBgOrKH = profile.campus.some(
+        (campus) => campus.id === 16 || campus.id === 21,
+      );
+
+      if (fromBgOrKH) return true;
+
+      return false;
     },
     async redirect({ url, baseUrl }) {
       if (url.startsWith(baseUrl)) return url;