@auth/azure-tables-adapter 0.1.0

package/LICENSE

@@ -0,0 +1,15 @@
+ISC License
+
+Copyright (c) 2022-2023, Balázs Orbán
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

package/README.md

@@ -0,0 +1,26 @@
+<p align="center">
+  <br/>
+  <a href="https://authjs.dev" target="_blank">
+    <img height="64px" src="https://authjs.dev/img/logo/logo-sm.png" />
+  </a>
+  <a href="https://azure.microsoft.com/en-us/products/storage/tables" target="_blank">
+    <img height="64px" src="https://authjs.dev/img/adapters/azure-tables.svg"/>
+  </a>
+  <h3 align="center"><b>Azure Table Storage Adapter</b> - NextAuth.js / Auth.js</a></h3>
+  <p align="center" style="align: center;">
+    <a href="https://npm.im/@auth/azure-tables-adapter">
+      <img src="https://img.shields.io/badge/TypeScript-blue?style=flat-square" alt="TypeScript" />
+    </a>
+    <a href="https://npm.im/@auth/azure-tables-adapter">
+      <img alt="npm" src="https://img.shields.io/npm/v/@auth/azure-tables-adapter?color=green&label=@auth/azure-tables-adapter&style=flat-square">
+    </a>
+    <a href="https://www.npmtrends.com/@auth/azure-tables-adapter">
+      <img src="https://img.shields.io/npm/dm/@auth/azure-tables-adapter?label=%20downloads&style=flat-square" alt="Downloads" />
+    </a>
+    <a href="https://github.com/nextauthjs/next-auth/stargazers">
+      <img src="https://img.shields.io/github/stars/nextauthjs/next-auth?style=flat-square" alt="Github Stars" />
+    </a>
+  </p>
+</p>
+
+---

package/index.d.ts

@@ -0,0 +1,70 @@
+/**
+ * <div style={{display: "flex", justifyContent: "space-between", alignItems: "center", padding: 16}}>
+ *  <p style={{fontWeight: "normal"}}>An official <a href="https://azure.microsoft.com/en-us/products/storage/tables">Azure Table Storage</a> adapter for Auth.js / NextAuth.js.</p>
+ *  <a href="https://azure.microsoft.com/en-us/products/storage/tables">
+ *   <img style={{display: "block"}} src="/img/adapters/azure-tables.svg" width="48" />
+ *  </a>
+ * </div>
+ *
+ * ## Installation
+ *
+ * ```bash npm2yarn2pnpm
+ * npm install next-auth @auth/azure-tables-adapter
+ * ```
+ *
+ * @module @auth/azure-tables-adapter
+ */
+import type { Adapter } from "@auth/core/adapters";
+import { GetTableEntityResponse, TableClient, TableEntityResult } from "@azure/data-tables";
+export declare const keys: {
+    user: string;
+    userByEmail: string;
+    account: string;
+    accountByUserId: string;
+    session: string;
+    sessionByUserId: string;
+    verificationToken: string;
+};
+export declare function withoutKeys<T>(entity: GetTableEntityResponse<TableEntityResult<T>>): T;
+/**
+ *
+ * 1. Create a table for authentication data, `auth` in the example below.
+ *
+ * ```js title="auth.ts"
+ * import type { AuthConfig } from "next-auth"
+ * import { TableStorageAdapter } from "@next-auth/azure-tables-adapter"
+ * import { AzureNamedKeyCredential, TableClient } from "@azure/data-tables"
+ *
+ * const credential = new AzureNamedKeyCredential(
+ *   process.env.AZURE_ACCOUNT,
+ *   process.env.AZURE_ACCESS_KEY
+ * )
+ * const authClient = new TableClient(
+ *   process.env.AZURE_TABLES_ENDPOINT,
+ *   "auth",
+ *   credential
+ * )
+ *
+ * // For more information on each option (and a full list of options) go to
+ * // https://authjs.dev/reference/configuration/auth-options
+ * export default const authConfig = {
+ *   // https://authjs.dev/reference/providers/oauth-builtin
+ *   providers: [
+ *     // ...
+ *   ],
+ *   adapter: TableStorageAdapter(authClient),
+ *   // ...
+ * } satisfies AuthConfig
+ * ```
+ *
+ * Environment variable are as follows:
+ *
+ * ```
+ * AZURE_ACCOUNT=storageaccountname
+ * AZURE_ACCESS_KEY=longRandomKey
+ * AZURE_TABLES_ENDPOINT=https://$AZURE_ACCOUNT.table.core.windows.net
+ * ```
+ *
+ */
+export declare const TableStorageAdapter: (client: TableClient) => Adapter;
+//# sourceMappingURL=index.d.ts.map

package/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EACV,OAAO,EAKR,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EACL,sBAAsB,EACtB,WAAW,EACX,iBAAiB,EAClB,MAAM,oBAAoB,CAAA;AAI3B,eAAO,MAAM,IAAI;;;;;;;;CAQhB,CAAA;AAED,wBAAgB,WAAW,CAAC,CAAC,EAC3B,MAAM,EAAE,sBAAsB,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GACnD,CAAC,CAUH;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,eAAO,MAAM,mBAAmB,WAAY,WAAW,KAAG,OA+MzD,CAAA"}

package/index.js

@@ -0,0 +1,258 @@
+/**
+ * <div style={{display: "flex", justifyContent: "space-between", alignItems: "center", padding: 16}}>
+ *  <p style={{fontWeight: "normal"}}>An official <a href="https://azure.microsoft.com/en-us/products/storage/tables">Azure Table Storage</a> adapter for Auth.js / NextAuth.js.</p>
+ *  <a href="https://azure.microsoft.com/en-us/products/storage/tables">
+ *   <img style={{display: "block"}} src="/img/adapters/azure-tables.svg" width="48" />
+ *  </a>
+ * </div>
+ *
+ * ## Installation
+ *
+ * ```bash npm2yarn2pnpm
+ * npm install next-auth @auth/azure-tables-adapter
+ * ```
+ *
+ * @module @auth/azure-tables-adapter
+ */
+globalThis.crypto ?? (globalThis.crypto = require("node:crypto").webcrypto);
+export const keys = {
+    user: "user",
+    userByEmail: "userByEmail",
+    account: "account",
+    accountByUserId: "accountByUserId",
+    session: "session",
+    sessionByUserId: "sessionByUserId",
+    verificationToken: "verificationToken",
+};
+export function withoutKeys(entity) {
+    delete entity.partitionKey;
+    delete entity.rowKey;
+    // @ts-expect-error
+    delete entity.etag;
+    delete entity.timestamp;
+    // @ts-expect-error
+    delete entity["odata.metadata"];
+    return entity;
+}
+/**
+ *
+ * 1. Create a table for authentication data, `auth` in the example below.
+ *
+ * ```js title="auth.ts"
+ * import type { AuthConfig } from "next-auth"
+ * import { TableStorageAdapter } from "@next-auth/azure-tables-adapter"
+ * import { AzureNamedKeyCredential, TableClient } from "@azure/data-tables"
+ *
+ * const credential = new AzureNamedKeyCredential(
+ *   process.env.AZURE_ACCOUNT,
+ *   process.env.AZURE_ACCESS_KEY
+ * )
+ * const authClient = new TableClient(
+ *   process.env.AZURE_TABLES_ENDPOINT,
+ *   "auth",
+ *   credential
+ * )
+ *
+ * // For more information on each option (and a full list of options) go to
+ * // https://authjs.dev/reference/configuration/auth-options
+ * export default const authConfig = {
+ *   // https://authjs.dev/reference/providers/oauth-builtin
+ *   providers: [
+ *     // ...
+ *   ],
+ *   adapter: TableStorageAdapter(authClient),
+ *   // ...
+ * } satisfies AuthConfig
+ * ```
+ *
+ * Environment variable are as follows:
+ *
+ * ```
+ * AZURE_ACCOUNT=storageaccountname
+ * AZURE_ACCESS_KEY=longRandomKey
+ * AZURE_TABLES_ENDPOINT=https://$AZURE_ACCOUNT.table.core.windows.net
+ * ```
+ *
+ */
+export const TableStorageAdapter = (client) => {
+    return {
+        async createUser(user) {
+            const id = crypto.randomUUID();
+            const newUser = {
+                ...user,
+                id,
+            };
+            await Promise.all([
+                client.createEntity({
+                    ...newUser,
+                    partitionKey: keys.userByEmail,
+                    rowKey: user.email,
+                }),
+                client.createEntity({
+                    ...newUser,
+                    partitionKey: keys.user,
+                    rowKey: id,
+                }),
+            ]);
+            return newUser;
+        },
+        async getUser(id) {
+            try {
+                const user = await client.getEntity(keys.user, id);
+                return withoutKeys(user);
+            }
+            catch {
+                return null;
+            }
+        },
+        async getUserByEmail(email) {
+            try {
+                const user = await client.getEntity(keys.userByEmail, email);
+                return withoutKeys(user);
+            }
+            catch {
+                return null;
+            }
+        },
+        async getUserByAccount({ providerAccountId, provider }) {
+            try {
+                const rowKey = `${providerAccountId}_${provider}`;
+                const account = await client.getEntity(keys.account, rowKey);
+                const user = await client.getEntity(keys.user, account.userId);
+                return withoutKeys(user);
+            }
+            catch {
+                return null;
+            }
+        },
+        async updateUser(user) {
+            const _user = await client.getEntity(keys.user, user.id);
+            const updatedUser = {
+                ...user,
+                partitionKey: keys.user,
+                rowKey: _user.id,
+            };
+            await client.updateEntity(updatedUser, "Merge");
+            return { ..._user, ...updatedUser };
+        },
+        async deleteUser(userId) {
+            try {
+                const user = await client.getEntity(keys.user, userId);
+                const { sessionToken } = await client.getEntity(keys.sessionByUserId, userId);
+                const accounts = withoutKeys(await client.getEntity(keys.accountByUserId, userId));
+                const deleteAccounts = Object.keys(accounts).map((property) => client.deleteEntity(keys.account, `${accounts[property]}_${property}`));
+                await Promise.allSettled([
+                    client.deleteEntity(keys.userByEmail, user.email),
+                    client.deleteEntity(keys.user, userId),
+                    client.deleteEntity(keys.session, sessionToken),
+                    client.deleteEntity(keys.sessionByUserId, userId),
+                    ...deleteAccounts,
+                    client.deleteEntity(keys.accountByUserId, userId),
+                ]);
+                return withoutKeys(user);
+            }
+            catch {
+                return null;
+            }
+        },
+        async linkAccount(account) {
+            try {
+                await client.createEntity({
+                    ...account,
+                    partitionKey: keys.account,
+                    rowKey: `${account.providerAccountId}_${account.provider}`,
+                });
+                await client.upsertEntity({
+                    partitionKey: keys.accountByUserId,
+                    rowKey: account.userId,
+                    [account.provider]: account.providerAccountId,
+                });
+                return account;
+            }
+            catch {
+                return null;
+            }
+        },
+        async unlinkAccount({ providerAccountId, provider }) {
+            const rowKey = `${providerAccountId}_${provider}`;
+            const account = await client.getEntity(keys.account, rowKey);
+            await client.deleteEntity(keys.account, rowKey);
+            await client.deleteEntity(keys.accountByUserId, account.userId);
+        },
+        async createSession(session) {
+            await client.createEntity({
+                ...session,
+                partitionKey: keys.session,
+                rowKey: session.sessionToken,
+            });
+            await client.upsertEntity({
+                partitionKey: keys.sessionByUserId,
+                rowKey: session.userId,
+                sessionToken: session.sessionToken,
+            });
+            return session;
+        },
+        async getSessionAndUser(sessionToken) {
+            try {
+                const session = await client.getEntity(keys.session, sessionToken);
+                if (session.expires.valueOf() < Date.now()) {
+                    await client.deleteEntity(keys.session, sessionToken);
+                }
+                const user = await client.getEntity(keys.user, session.userId);
+                return {
+                    session: withoutKeys(session),
+                    user: withoutKeys(user),
+                };
+            }
+            catch {
+                return null;
+            }
+        },
+        async updateSession(session) {
+            const _session = await client.getEntity(keys.session, session.sessionToken);
+            const newSession = {
+                expires: session.expires ?? _session.expires,
+            };
+            await client.updateEntity({
+                ...newSession,
+                partitionKey: keys.session,
+                rowKey: session.sessionToken,
+            });
+            return { ...withoutKeys(_session), ...newSession };
+        },
+        async deleteSession(sessionToken) {
+            try {
+                const session = await client.getEntity(keys.session, sessionToken);
+                await Promise.allSettled([
+                    client.deleteEntity(keys.session, sessionToken),
+                    client.deleteEntity(keys.sessionByUserId, session.userId),
+                ]);
+                return withoutKeys(session);
+            }
+            catch {
+                return null;
+            }
+        },
+        async createVerificationToken(token) {
+            await client.createEntity({
+                ...token,
+                partitionKey: keys.verificationToken,
+                rowKey: token.token,
+            });
+            return token;
+        },
+        async useVerificationToken({ identifier, token }) {
+            try {
+                const tokenEntity = await client.getEntity(keys.verificationToken, token);
+                if (tokenEntity.identifier !== identifier) {
+                    return null;
+                }
+                await client.deleteEntity(keys.verificationToken, token);
+                return withoutKeys(tokenEntity);
+            }
+            catch {
+                return null;
+            }
+        },
+    };
+};

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@auth/azure-tables-adapter",
+  "version": "0.1.0",
+  "description": "Azure Tables Storage adapter for next-auth.",
+  "homepage": "https://authjs.dev",
+  "repository": "https://github.com/nextauthjs/next-auth",
+  "bugs": {
+    "url": "https://github.com/nextauthjs/next-auth/issues"
+  },
+  "author": "Nikita Dmitrijev <nikitadmitry@gmail.com>",
+  "contributors": [
+    "Thang Huu Vu <hi@thvu.dev>"
+  ],
+  "license": "ISC",
+  "keywords": [
+    "next-auth",
+    "next.js",
+    "oauth",
+    "azure-tables",
+    "adapter"
+  ],
+  "type": "module",
+  "types": "./index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./index.d.ts",
+      "import": "./index.js"
+    }
+  },
+  "files": [
+    "*.d.ts*",
+    "*.js",
+    "src"
+  ],
+  "private": false,
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@auth/core": "0.15.2"
+  },
+  "peerDependencies": {
+    "@azure/data-tables": "^13.2.1"
+  },
+  "devDependencies": {
+    "jest": "^27.4.3",
+    "@azure/data-tables": "^13.2.1",
+    "@auth/adapter-test": "0.0.0",
+    "@auth/tsconfig": "0.0.0"
+  },
+  "jest": {
+    "preset": "@auth/adapter-test/jest"
+  },
+  "scripts": {
+    "test": "./tests/test.sh",
+    "test:watch": "./tests/test.sh -w",
+    "build": "tsc"
+  }
+}

package/src/index.ts

@@ -0,0 +1,303 @@
+/**
+ * <div style={{display: "flex", justifyContent: "space-between", alignItems: "center", padding: 16}}>
+ *  <p style={{fontWeight: "normal"}}>An official <a href="https://azure.microsoft.com/en-us/products/storage/tables">Azure Table Storage</a> adapter for Auth.js / NextAuth.js.</p>
+ *  <a href="https://azure.microsoft.com/en-us/products/storage/tables">
+ *   <img style={{display: "block"}} src="/img/adapters/azure-tables.svg" width="48" />
+ *  </a>
+ * </div>
+ *
+ * ## Installation
+ *
+ * ```bash npm2yarn2pnpm
+ * npm install next-auth @auth/azure-tables-adapter
+ * ```
+ *
+ * @module @auth/azure-tables-adapter
+ */
+
+import type {
+  Adapter,
+  AdapterUser,
+  AdapterAccount,
+  AdapterSession,
+  VerificationToken,
+} from "@auth/core/adapters"
+import {
+  GetTableEntityResponse,
+  TableClient,
+  TableEntityResult,
+} from "@azure/data-tables"
+
+globalThis.crypto ??= require("node:crypto").webcrypto
+
+export const keys = {
+  user: "user",
+  userByEmail: "userByEmail",
+  account: "account",
+  accountByUserId: "accountByUserId",
+  session: "session",
+  sessionByUserId: "sessionByUserId",
+  verificationToken: "verificationToken",
+}
+
+export function withoutKeys<T>(
+  entity: GetTableEntityResponse<TableEntityResult<T>>
+): T {
+  delete entity.partitionKey
+  delete entity.rowKey
+  // @ts-expect-error
+  delete entity.etag
+  delete entity.timestamp
+  // @ts-expect-error
+  delete entity["odata.metadata"]
+
+  return entity
+}
+/**
+ *
+ * 1. Create a table for authentication data, `auth` in the example below.
+ *
+ * ```js title="auth.ts"
+ * import type { AuthConfig } from "next-auth"
+ * import { TableStorageAdapter } from "@next-auth/azure-tables-adapter"
+ * import { AzureNamedKeyCredential, TableClient } from "@azure/data-tables"
+ *
+ * const credential = new AzureNamedKeyCredential(
+ *   process.env.AZURE_ACCOUNT,
+ *   process.env.AZURE_ACCESS_KEY
+ * )
+ * const authClient = new TableClient(
+ *   process.env.AZURE_TABLES_ENDPOINT,
+ *   "auth",
+ *   credential
+ * )
+ *
+ * // For more information on each option (and a full list of options) go to
+ * // https://authjs.dev/reference/configuration/auth-options
+ * export default const authConfig = {
+ *   // https://authjs.dev/reference/providers/oauth-builtin
+ *   providers: [
+ *     // ...
+ *   ],
+ *   adapter: TableStorageAdapter(authClient),
+ *   // ...
+ * } satisfies AuthConfig
+ * ```
+ *
+ * Environment variable are as follows:
+ *
+ * ```
+ * AZURE_ACCOUNT=storageaccountname
+ * AZURE_ACCESS_KEY=longRandomKey
+ * AZURE_TABLES_ENDPOINT=https://$AZURE_ACCOUNT.table.core.windows.net
+ * ```
+ *
+ */
+export const TableStorageAdapter = (client: TableClient): Adapter => {
+  return {
+    async createUser(user) {
+      const id = crypto.randomUUID()
+      const newUser = {
+        ...user,
+        id,
+      }
+      await Promise.all([
+        client.createEntity({
+          ...newUser,
+          partitionKey: keys.userByEmail,
+          rowKey: user.email,
+        }),
+        client.createEntity({
+          ...newUser,
+          partitionKey: keys.user,
+          rowKey: id,
+        }),
+      ])
+      return newUser
+    },
+    async getUser(id: string) {
+      try {
+        const user = await client.getEntity<AdapterUser>(keys.user, id)
+        return withoutKeys(user)
+      } catch {
+        return null
+      }
+    },
+    async getUserByEmail(email) {
+      try {
+        const user = await client.getEntity<AdapterUser>(
+          keys.userByEmail,
+          email
+        )
+        return withoutKeys(user)
+      } catch {
+        return null
+      }
+    },
+    async getUserByAccount({ providerAccountId, provider }) {
+      try {
+        const rowKey = `${providerAccountId}_${provider}`
+        const account = await client.getEntity<AdapterAccount>(
+          keys.account,
+          rowKey
+        )
+        const user = await client.getEntity<AdapterUser>(
+          keys.user,
+          account.userId
+        )
+        return withoutKeys(user)
+      } catch {
+        return null
+      }
+    },
+    async updateUser(user) {
+      const _user = await client.getEntity<AdapterUser>(keys.user, user.id)
+      const updatedUser = {
+        ...user,
+        partitionKey: keys.user,
+        rowKey: _user.id,
+      }
+      await client.updateEntity(updatedUser, "Merge")
+      return { ..._user, ...updatedUser }
+    },
+    async deleteUser(userId) {
+      try {
+        const user = await client.getEntity<AdapterUser>(keys.user, userId)
+        const { sessionToken } = await client.getEntity<AdapterSession>(
+          keys.sessionByUserId,
+          userId
+        )
+        const accounts = withoutKeys(
+          await client.getEntity<AdapterAccount>(keys.accountByUserId, userId)
+        )
+        const deleteAccounts = Object.keys(accounts).map((property) =>
+          client.deleteEntity(keys.account, `${accounts[property]}_${property}`)
+        )
+        await Promise.allSettled([
+          client.deleteEntity(keys.userByEmail, user.email),
+          client.deleteEntity(keys.user, userId),
+          client.deleteEntity(keys.session, sessionToken),
+          client.deleteEntity(keys.sessionByUserId, userId),
+          ...deleteAccounts,
+          client.deleteEntity(keys.accountByUserId, userId),
+        ])
+        return withoutKeys(user)
+      } catch {
+        return null
+      }
+    },
+    async linkAccount(account) {
+      try {
+        await client.createEntity({
+          ...account,
+          partitionKey: keys.account,
+          rowKey: `${account.providerAccountId}_${account.provider}`,
+        })
+        await client.upsertEntity({
+          partitionKey: keys.accountByUserId,
+          rowKey: account.userId,
+          [account.provider]: account.providerAccountId,
+        })
+        return account
+      } catch {
+        return null
+      }
+    },
+    async unlinkAccount({ providerAccountId, provider }) {
+      const rowKey = `${providerAccountId}_${provider}`
+      const account = await client.getEntity<AdapterAccount>(
+        keys.account,
+        rowKey
+      )
+      await client.deleteEntity(keys.account, rowKey)
+      await client.deleteEntity(keys.accountByUserId, account.userId)
+    },
+    async createSession(session) {
+      await client.createEntity({
+        ...session,
+        partitionKey: keys.session,
+        rowKey: session.sessionToken,
+      })
+      await client.upsertEntity({
+        partitionKey: keys.sessionByUserId,
+        rowKey: session.userId,
+        sessionToken: session.sessionToken,
+      })
+      return session
+    },
+    async getSessionAndUser(sessionToken) {
+      try {
+        const session = await client.getEntity<AdapterSession>(
+          keys.session,
+          sessionToken
+        )
+        if (session.expires.valueOf() < Date.now()) {
+          await client.deleteEntity(keys.session, sessionToken)
+        }
+        const user = await client.getEntity<AdapterUser>(
+          keys.user,
+          session.userId
+        )
+        return {
+          session: withoutKeys(session),
+          user: withoutKeys(user),
+        }
+      } catch {
+        return null
+      }
+    },
+    async updateSession(session) {
+      const _session = await client.getEntity<AdapterSession>(
+        keys.session,
+        session.sessionToken
+      )
+      const newSession = {
+        expires: session.expires ?? _session.expires,
+      }
+      await client.updateEntity({
+        ...newSession,
+        partitionKey: keys.session,
+        rowKey: session.sessionToken,
+      })
+      return { ...withoutKeys(_session), ...newSession }
+    },
+    async deleteSession(sessionToken) {
+      try {
+        const session = await client.getEntity<AdapterSession>(
+          keys.session,
+          sessionToken
+        )
+        await Promise.allSettled([
+          client.deleteEntity(keys.session, sessionToken),
+          client.deleteEntity(keys.sessionByUserId, session.userId),
+        ])
+        return withoutKeys(session)
+      } catch {
+        return null
+      }
+    },
+    async createVerificationToken(token) {
+      await client.createEntity({
+        ...token,
+        partitionKey: keys.verificationToken,
+        rowKey: token.token,
+      })
+      return token
+    },
+    async useVerificationToken({ identifier, token }) {
+      try {
+        const tokenEntity = await client.getEntity<VerificationToken>(
+          keys.verificationToken,
+          token
+        )
+        if (tokenEntity.identifier !== identifier) {
+          return null
+        }
+        await client.deleteEntity(keys.verificationToken, token)
+        return withoutKeys(tokenEntity)
+      } catch {
+        return null
+      }
+    },
+  }
+}