import NextAuth from 'next-auth'; import Credentials from 'next-auth/providers/credentials'; import bcrypt from 'bcryptjs'; import { prisma } from '@/lib/prisma'; export const { handlers, signIn, signOut, auth } = NextAuth({ providers: [ Credentials({ name: 'credentials', credentials: { email: { label: 'Email', type: 'email' }, password: { label: 'Password', type: 'password' }, }, async authorize(credentials) { if (!credentials?.email || !credentials?.password) return null; const user = await prisma.user.findUnique({ where: { email: credentials.email as string }, }); if (!user) return null; const isValid = await bcrypt.compare( credentials.password as string, user.hashedPassword ); if (!isValid) return null; return { id: user.id, email: user.email, name: user.name, }; }, }), ], session: { strategy: 'jwt', maxAge: 30 * 24 * 60 * 60, // 30 days }, secret: process.env.AUTH_SECRET || 'fallback_secret_for_development_purposes_only', callbacks: { async jwt({ token, user }) { if (user) { token.id = user.id; } return token; }, async session({ session, token }) { if (session.user && token.id) { session.user.id = token.id as string; } return session; }, }, pages: { signIn: '/', }, });