Source: app/api/auth/[...nextauth]/route.js

  1. import clientPromise from "@/lib/mongodb";
  2. import { MongoDBAdapter } from "@auth/mongodb-adapter";
  3. import NextAuth from "next-auth";
  4. import EmailProvider from "next-auth/providers/email";
  5. import { createTransport } from "nodemailer";
  7. async function sendVerificationRequest(params) {
  8.   const { identifier, url, provider, theme } = params;
  10.   const allowedEmails = process.env.ALLOWED_EMAILS?.split(",") ?? [];
  11.   if (!allowedEmails.includes(identifier)) {
  12.     throw new Error("Email could not be sent");
  13.   }
  15.   const { host } = new URL(url);
  16.   // NOTE: You are not required to use `nodemailer`, use whatever you want.
  17.   const transport = createTransport(provider.server);
  18.   const result = await transport.sendMail({
  19.     to: identifier,
  20.     from: provider.from,
  21.     subject: `Sign in to ${host}`,
  22.     text: text({ url, host }),
  23.     html: html({ url, host, theme }),
  24.   });
  25.   const failed = result.rejected.concat(result.pending).filter(Boolean);
  26.   if (failed.length) {
  27.     throw new Error(`Email(s) (${failed.join(", ")}) could not be sent`);
  28.   }
  29. }
  31. /**
  32.  * Email HTML body
  33.  * Insert invisible space into domains from being turned into a hyperlink by email
  34.  * clients like Outlook and Apple mail, as this is confusing because it seems
  35.  * like they are supposed to click on it to sign in.
  36.  *
  37.  * @note We don't add the email address to avoid needing to escape it, if you do, remember to sanitize it!
  38.  */
  39. function html(params) {
  40.   const { url, host, theme } = params;
  42.   const escapedHost = host.replace(/\./g, "​.");
  44.   const brandColor = theme.brandColor || "#346df1";
  45.   const color = {
  46.     background: "#f9f9f9",
  47.     text: "#444",
  48.     mainBackground: "#fff",
  49.     buttonBackground: brandColor,
  50.     buttonBorder: brandColor,
  51.     buttonText: theme.buttonText || "#fff",
  52.   };
  54.   return `
  55. <body style="background: ${color.background};">
  56.   <table width="100%" border="0" cellspacing="20" cellpadding="0"
  57.     style="background: ${color.mainBackground}; max-width: 600px; margin: auto; border-radius: 10px;">
  58.     <tr>
  59.       <td align="center"
  60.         style="padding: 10px 0px; font-size: 22px; font-family: Helvetica, Arial, sans-serif; color: ${color.text};">
  61.         Sign in to <strong>${escapedHost}</strong>
  62.       </td>
  63.     </tr>
  64.     <tr>
  65.       <td align="center" style="padding: 20px 0;">
  66.         <table border="0" cellspacing="0" cellpadding="0">
  67.           <tr>
  68.             <td align="center" style="border-radius: 5px;" bgcolor="${color.buttonBackground}"><a href="${url}"
  69.                 target="_blank"
  70.                 style="font-size: 18px; font-family: Helvetica, Arial, sans-serif; color: ${color.buttonText}; text-decoration: none; border-radius: 5px; padding: 10px 20px; border: 1px solid ${color.buttonBorder}; display: inline-block; font-weight: bold;">Sign
  71.                 in</a></td>
  72.           </tr>
  73.         </table>
  74.       </td>
  75.     </tr>
  76.     <tr>
  77.       <td align="center"
  78.         style="padding: 0px 0px 10px 0px; font-size: 16px; line-height: 22px; font-family: Helvetica, Arial, sans-serif; color: ${color.text};">
  79.         If you did not request this email you can safely ignore it.
  80.       </td>
  81.     </tr>
  82.   </table>
  83. </body>
  84. `;
  85. }
  87. /** Email Text body (fallback for email clients that don't render HTML, e.g. feature phones) */
  88. function text({ url, host }) {
  89.   return `Sign in to ${host}\n${url}\n\n`;
  90. }
  92. export const authOptions = {
  93.   secret: process.env.AUTH_SECRET,
  94.   adapter: MongoDBAdapter(clientPromise),
  95.   providers: [
  96.     EmailProvider({
  97.       server: {
  98.         host: process.env.EMAIL_SERVER_HOST,
  99.         port: process.env.EMAIL_SERVER_PORT,
  100.         auth: {
  101.           user: process.env.EMAIL_SERVER_USER,
  102.           pass: process.env.EMAIL_SERVER_PASSWORD,
  103.         },
  104.       },
  105.       from: process.env.EMAIL_FROM,
  106.       sendVerificationRequest,
  107.     }),
  108.   ],
  109. };
  111. const handler = NextAuth(authOptions);
  113. export { handler as GET, handler as POST };