360e58e473
Les comptes déjà créés ne sont pas inscrits. Le choix est facultatif à l’inscription et dans les paramètres. Un lien public demande confirmation avant d’arrêter les actualités, sans toucher aux messages de compte.
81 lines
3.1 KiB
TypeScript
81 lines
3.1 KiB
TypeScript
import type { NextAuthConfig } from 'next-auth';
|
|
|
|
export const authConfig = {
|
|
pages: {
|
|
signIn: '/login',
|
|
newUser: '/register',
|
|
},
|
|
secret: process.env.NEXTAUTH_SECRET,
|
|
trustHost: true,
|
|
session: {
|
|
strategy: 'jwt',
|
|
maxAge: 60 * 60 * 24 * 7,
|
|
updateAge: 60 * 60 * 12,
|
|
},
|
|
callbacks: {
|
|
authorized({ auth, request: { nextUrl } }) {
|
|
const isLoggedIn = !!auth?.user;
|
|
const isAdmin = (auth?.user as any)?.role === 'ADMIN';
|
|
const isDashboardPage = nextUrl.pathname === '/home' ||
|
|
nextUrl.pathname.startsWith('/reminders') ||
|
|
nextUrl.pathname.startsWith('/archive') ||
|
|
nextUrl.pathname.startsWith('/trash') ||
|
|
nextUrl.pathname.startsWith('/settings') ||
|
|
nextUrl.pathname.startsWith('/lab') ||
|
|
nextUrl.pathname.startsWith('/agents') ||
|
|
nextUrl.pathname.startsWith('/canvas') ||
|
|
nextUrl.pathname.startsWith('/notebooks') ||
|
|
nextUrl.pathname.startsWith('/note/') ||
|
|
nextUrl.pathname.startsWith('/brainstorm') ||
|
|
nextUrl.pathname.startsWith('/insights') ||
|
|
nextUrl.pathname.startsWith('/revision');
|
|
const isAdminPage = nextUrl.pathname.startsWith('/admin');
|
|
const isPublicPage = nextUrl.pathname === '/' ||
|
|
nextUrl.pathname === '/login' ||
|
|
nextUrl.pathname === '/register' ||
|
|
nextUrl.pathname === '/forgot-password' ||
|
|
nextUrl.pathname === '/check-email' ||
|
|
nextUrl.pathname === '/verify-email' ||
|
|
nextUrl.pathname.startsWith('/reset-password') ||
|
|
nextUrl.pathname === '/unsubscribe' ||
|
|
nextUrl.pathname.startsWith('/unsubscribe/');
|
|
|
|
if (isAdminPage) {
|
|
return isLoggedIn && isAdmin;
|
|
}
|
|
|
|
if (isDashboardPage) {
|
|
if (isLoggedIn) return true;
|
|
return false;
|
|
}
|
|
|
|
if (isLoggedIn && (nextUrl.pathname === '/login' || nextUrl.pathname === '/register')) {
|
|
return Response.redirect(new URL('/home', nextUrl));
|
|
}
|
|
|
|
return true;
|
|
},
|
|
async jwt({ token, user, trigger, session }) {
|
|
if (trigger === 'update' && session && 'aiSessionConsent' in session) {
|
|
token.aiSessionConsent = session.aiSessionConsent === true;
|
|
return token;
|
|
}
|
|
if (user) {
|
|
token.id = user.id;
|
|
token.role = (user as any).role;
|
|
token.aiSessionConsent = false;
|
|
}
|
|
return token;
|
|
},
|
|
async session({ session, token }) {
|
|
if (token && session.user) {
|
|
(session.user as any).id = token.id;
|
|
(session.user as any).role = token.role;
|
|
session.aiSessionConsent = token.aiSessionConsent === true;
|
|
(session.user as any).onboardingCompleted = token.onboardingCompleted === true;
|
|
}
|
|
return session;
|
|
},
|
|
},
|
|
providers: [],
|
|
} satisfies NextAuthConfig; |