tomodachi-share/backend/src/lib/auth.ts

import NextAuth from "next-auth";
import Discord from "next-auth/providers/discord";
import Github from "next-auth/providers/github";
import Google from "next-auth/providers/google";

import { PrismaAdapter } from "@auth/prisma-adapter";
import { prisma } from "@/lib/prisma";

export const { handlers, signIn, signOut, auth } = NextAuth({
	adapter: PrismaAdapter(prisma),
	providers: [Discord, Github({ issuer: "https://github.com/login/oauth" }), Google],
	trustHost: true,
	cookies: {
		sessionToken: {
			name: process.env.NODE_ENV === "production" ? "__Secure-next-auth.session-token" : "next-auth.session-token",
			options: {
				httpOnly: true,
				sameSite: "none",
				path: "/",
				secure: true,
			},
		},
	},
	session: {
		strategy: "database",
		maxAge: 30 * 24 * 60 * 60,
	},
	callbacks: {
		async signIn({ user }) {
			const blacklist = process.env.BLACKLISTED_EMAILS ? process.env.BLACKLISTED_EMAILS.split(",").map((item) => item.trim().toLowerCase()) : [];
			const email = user?.email?.toLowerCase();
			if (!email) return false;
			if (blacklist?.some((blocked) => email.endsWith(blocked))) return false;
			return true;
		},

		async session({ session, user }) {
			if (user) {
				session.user.id = user.id;
				session.user.email = user.email;
			}
			return session;
		},

		async redirect({ url, baseUrl }) {
			return process.env.FRONTEND_URL ?? "http://localhost:4321";
		},
	},
});