auth.ts

/* eslint-disable @typescript-eslint/strict-boolean-expressions */
import NextAuth from 'next-auth';
import authConfig from '@/auth.config';
import prisma from './db';
import { getUserById } from './lib/auth/user';
import { getTwoFactorConfirmationByUserId } from './lib/auth/two-factor-confirmation';
import { type planTypes } from '@prisma/client';
import APP_PATHS from './config/path.config';
import { PrismaAdapter } from '@auth/prisma-adapter';
import { type Adapter } from 'next-auth/adapters';

export const {
	handlers: { GET, POST },
	auth,
	signIn,
	signOut,
} = NextAuth({
	adapter: PrismaAdapter(prisma) as Adapter,
	pages: {
		signIn: APP_PATHS.LOGIN,
	},
	events: {
		async linkAccount({ user }) {
			await prisma.user.update({
				where: { id: user.id },
				data: { emailVerified: new Date() },
			});
		},
	},
	callbacks: {
		async signIn({ user, account }) {
			if (account?.provider !== 'credentials') return true;

			if (!user.id) {
				return false;
			}

			const existingUser = await getUserById(user.id);

			if (existingUser?.emailVerified === null) return false;

			if (existingUser?.isTwoFactorEnabled) {
				const twoFactorConfirmation = await getTwoFactorConfirmationByUserId(existingUser.id);

				if (!twoFactorConfirmation) return false;

				await prisma.twoFactorConfirmation.delete({
					where: { id: twoFactorConfirmation.id },
				});
			}

			return true;
		},
		async session({ token, session }) {
			if (session.user && token.sub) {
				session.user.id = token.sub;
			}

			if ('isTwoFactorEnabled' in token && session.user) {
				session.user.isTwoFactorEnabled = token.isTwoFactorEnabled as boolean;
			}

			if (token.plan && token.plantId) {
				session.user.plan = token.plan as planTypes;
				session.user.plantId = token.plantId as string;
			}

			if (session.user) {
				session.user.name = token.name;
			}
			return session;
		},
		async jwt({ token }) {
			if (!token.sub) return token;

			const existingUser = await getUserById(token.sub);

			if (!existingUser) return token;

			token.name = existingUser.name;

			token.isTwoFactorEnabled = existingUser.isTwoFactorEnabled;

			token.plan = existingUser?.plan?.type || 'free';
			token.plantId = existingUser?.plan?.id;

			token.isTwoFactorEnabled = existingUser.isTwoFactorEnabled;
			return token;
		},
	},
	session: { strategy: 'jwt' },
	...authConfig,
});