nshop-front-pc/src/utils/auth.ts

import NextAuth, { type NextAuthOptions } from "next-auth";
import CredentialsProvider from "next-auth/providers/credentials";
import { bagistoFetch, /*restApiFetch*/} from "@/utils/bagisto";
import { CUSTOMER_LOGIN } from "@/graphql/customer/mutations";
import type {CustomerLoginResponse} from "@/types/customer/type";
import { env } from "@/env";

export const authOptions: NextAuthOptions = {
  session: {
    strategy: "jwt",
    maxAge: 30 * 24 * 60 * 60,
  },

  providers: [
    // https://next-auth.js.org/configuration/providers/credentials
    CredentialsProvider({
      name: "Credentials",
      credentials: {
        username: { label: "Email", type: "text" },
        password: { label: "Password", type: "password" },
      },


      authorize: async (credentials): Promise<any> => {
        if (!credentials?.username || !credentials?.password) {
          throw new Error("Email and password are required.");
        }

        const input = {
          email: credentials.username,
          password: credentials.password,
        };


        const res = await bagistoFetch<{
          data: CustomerLoginResponse,
          variables: {input:{email:string;password:string;}}
        }>({
          query: CUSTOMER_LOGIN,
          variables: { input },
          cache: "no-store",
        });

        const data = res?.body?.data?.createCustomerLogin?.customerLogin;
        /* 使用rest api
        const res = await restApiFetch<any>({
          api: "/customer/login",
          variables: { ...input },
          cache: "no-store",
        });
        
        const data = res?.body;
        */

        if (!data || !data.success || !data.token) {
          throw new Error(data?.message || "Invalid credentials.");
        }

        return {
          id: data.id, // required by NextAuth
          email: credentials.username,
          name: credentials.username, // Using email as name since firstName/lastName are missing in response
          apiToken: data.apiToken,
          accessToken: data.token, // Sanctum token
          role: "customer",
        };
      },
    }),
  ],

  //https://next-auth.js.org/configuration/callbacks
  // nextAuth.js 的jwt token 和session 存在自动续签问题
  // 但是accessToken没有刷新机制
  callbacks: {
    async jwt({ token, user }) {
      // 登录时 user是有值的，登录过后，获取用户信息user是null
      if (user) {
        token.id = user.id;
        token.apiToken = user.apiToken;
        token.accessToken = user.accessToken;
        token.role = "customer";
      }
      return token;
    },

    async session({ session, token }) {
      session.user = {
        ...session.user,
        id: token.id || "",
        // apiToken: token.apiToken,
        accessToken: token.accessToken,
        role: token.role,
      };

      return session;
    },
  },

  pages: {
    signIn: "/customer/login",
    error: "/login",
  },

  secret: env.NEXTAUTH_SECRET,
};

export const handler = NextAuth(authOptions);