Add email authentication via postmark

.env.example

@@ -18,3 +18,9 @@ NEXTAUTH_SECRET="changeme"
 NEXTAUTH_URL="$HOST"
 GOOGLE_CLIENT_ID="XXXX"
 GOOGLE_CLIENT_SECRET="XXXX"
+
+# Email (Authentication)
+SMTP_FROM=StartKit <no-reply@startkit.dev>
+POSTMARK_API_TOKEN="changeme"
+POSTMARK_SIGN_IN_TEMPLATE_ALIAS="sign-in"
+POSTMARK_ACTIVATION_TEMPLATE_ALIAS="welcome"

lib/auth/options.ts

@@ -1,11 +1,18 @@
 /* eslint-disable @typescript-eslint/no-non-null-assertion */
 import { PrismaAdapter } from "@next-auth/prisma-adapter"
+import EmailProvider from "next-auth/providers/email"
 import GoogleProvider from "next-auth/providers/google"
+import { Client } from "postmark"
 
+import { siteConfig } from "@/config"
 import { prisma } from "@/lib/database"
 
+import { fullURL } from "../url-fns"
+
 import type { NextAuthOptions } from "next-auth"
 
+const postmarkClient = new Client(process.env.POSTMARK_API_TOKEN!)
+
 export const authOptions: NextAuthOptions = {
   /**
    * https://authjs.dev/reference/adapter/prisma
@@ -15,6 +22,56 @@ export const authOptions: NextAuthOptions = {
    * https://next-auth.js.org/providers/
    */
   providers: [
+    /**
+     *
+     */
+    EmailProvider({
+      from: process.env.SMTP_FROM,
+      sendVerificationRequest: async ({ identifier, url, provider }) => {
+        const user = await prisma.user.findUnique({
+          where: {
+            email: identifier
+          },
+          select: {
+            emailVerified: true
+          }
+        })
+
+        const templateAlias = user?.emailVerified
+          ? process.env.POSTMARK_SIGN_IN_TEMPLATE_ALIAS
+          : process.env.POSTMARK_ACTIVATION_TEMPLATE_ALIAS
+
+        if (!templateAlias) {
+          throw new Error("Missing template id")
+        }
+
+        const result = await postmarkClient.sendEmailWithTemplate({
+          To: identifier,
+          From: provider.from as string,
+          TemplateAlias: templateAlias,
+          TemplateModel: {
+            product_url: fullURL(),
+            product_name: siteConfig.name,
+            name: identifier,
+            action_url: url,
+            company_name: siteConfig.company.name,
+            company_address: siteConfig.company.link
+          },
+          Headers: [
+            {
+              // Set this to prevent Gmail from threading emails.
+              // See https://stackoverflow.com/questions/23434110/force-emails-not-to-be-grouped-into-conversations/25435722.
+              Name: "X-Entity-Ref-ID",
+              Value: new Date().getTime() + ""
+            }
+          ]
+        })
+
+        if (result.ErrorCode) {
+          throw new Error(result.Message)
+        }
+      }
+    }),
     /**
      * https://next-auth.js.org/providers/google
      */

package.json

@@ -31,6 +31,8 @@
     "next-auth": "^4.22.1",
     "next-themes": "^0.2.1",
     "nextjs-google-analytics": "^2.3.3",
+    "nodemailer": "^6.9.1",
+    "postmark": "^3.0.15",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
     "react-hook-form": "^7.43.9",