61 lines
1.7 KiB
TypeScript
61 lines
1.7 KiB
TypeScript
|
import NextAuth from "next-auth";
|
||
|
|
import Discord from "next-auth/providers/discord";
|
||
|
|
|
||
|
|
const ALLOWED_ADMIN_IDS = process.env.ALLOWED_DISCORD_IDS?.split(",") || [];
|
||
|
|
|
||
|
|
export const { handlers, signIn, signOut, auth } = NextAuth({
|
||
|
|
providers: [
|
||
|
|
Discord({
|
||
|
|
clientId: process.env.DISCORD_CLIENT_ID!,
|
||
|
|
clientSecret: process.env.DISCORD_CLIENT_SECRET!,
|
||
|
|
authorization: {
|
||
|
|
params: {
|
||
|
|
scope: "identify",
|
||
|
|
},
|
||
|
|
},
|
||
|
|
}),
|
||
|
|
],
|
||
|
|
callbacks: {
|
||
|
|
async signIn({ account }) {
|
||
|
|
if (account?.provider === "discord") {
|
||
|
|
const discordId = account.providerAccountId;
|
||
|
|
if (!ALLOWED_ADMIN_IDS.includes(discordId)) {
|
||
|
|
return "/login?error=unauthorized";
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return true;
|
||
|
|
},
|
||
|
|
async session({ session, token }) {
|
||
|
|
if (token.sub) {
|
||
|
|
session.user.id = token.sub;
|
||
|
|
}
|
||
|
|
if (token.discordId) {
|
||
|
|
session.user.discordId = token.discordId as string;
|
||
|
|
}
|
||
|
|
return session;
|
||
|
|
},
|
||
|
|
async jwt({ token, account }) {
|
||
|
|
if (account?.provider === "discord") {
|
||
|
|
token.discordId = account.providerAccountId;
|
||
|
|
}
|
||
|
|
return token;
|
||
|
|
},
|
||
|
|
},
|
||
|
|
pages: {
|
||
|
|
signIn: "/login",
|
||
|
|
error: "/login",
|
||
|
|
},
|
||
|
|
});
|
||
|
|
|
||
|
|
declare module "next-auth" {
|
||
|
|
interface Session {
|
||
|
|
user: {
|
||
|
|
id: string;
|
||
|
|
discordId?: string;
|
||
|
|
name?: string | null;
|
||
|
|
email?: string | null;
|
||
|
|
image?: string | null;
|
||
|
|
};
|
||
|
|
}
|
||
|
|
}
|