@auth/d1-adapter 0.2.0

package/LICENSE

@@ -0,0 +1,15 @@
+ISC License
+
+Copyright (c) 2022-2023, Balázs Orbán
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

package/README.md

@@ -0,0 +1,28 @@
+<p align="center">
+  <br/>
+  <a href="https://authjs.dev" target="_blank">
+    <img height="64px" src="https://authjs.dev/img/logo/logo-sm.png" />
+  </a>
+  <a href="https://developers.cloudflare.com/d1/" target="_blank">
+    <img height="64px" src="https://authjs.dev/img/adapters/d1.svg"/>
+  </a>
+  <h3 align="center"><b>Cloudflare D1 Adapter</b> - NextAuth.js / Auth.js</a></h3>
+  <p align="center" style="align: center;">
+    <a href="https://npm.im/@auth/drizzle-adapter">
+      <img src="https://img.shields.io/badge/TypeScript-blue?style=flat-square" alt="TypeScript" />
+    </a>
+    <a href="https://npm.im/@auth/d1-adapter">
+      <img alt="npm" src="https://img.shields.io/npm/v/@auth/d1-adapter?color=green&label=@auth/d1-adapter&style=flat-square">
+    </a>
+    <a href="https://www.npmtrends.com/@auth/d1-adapter">
+      <img src="https://img.shields.io/npm/dm/@auth/d1-adapter?label=%20downloads&style=flat-square" alt="Downloads" />
+    </a>
+    <a href="https://github.com/nextauthjs/next-auth/stargazers">
+      <img src="https://img.shields.io/github/stars/nextauthjs/next-auth?style=flat-square" alt="Github Stars" />
+    </a>
+  </p>
+</p>
+
+---
+
+Check out the documentation at [authjs.dev](https://authjs.dev/reference/adapter/d1).

package/index.d.ts

@@ -0,0 +1,107 @@
+/**
+ * <div style={{display: "flex", justifyContent: "space-between", alignItems: "center", padding: 16}}>
+ *  <p style={{fontWeight: "normal"}}>An unofficial <a href="https://developers.cloudflare.com/d1/">Cloudflare D1</a> adapter for Auth.js / NextAuth.js.</p>
+ *  <a href="https://developers.cloudflare.com/d1/">
+ *   <img style={{display: "block"}} src="/img/adapters/d1.svg" width="48" />
+ *  </a>
+ * </div>
+ *
+ * ## Warning
+ * This adapter is not developed or maintained by Clouflare and they haven't declared the D1 api stable.  The author will make an effort to keep this adapter up to date.
+ * The adapter is compatible with the D1 api as of March 22, 2023.
+ *
+ * ## Installation
+ *
+ * ```bash npm2yarn2pnpm
+ * npm install next-auth @auth/d1-adapter
+ * ```
+ *
+ * @module @auth/d1-adapter
+ */
+import type { D1Database as WorkerDatabase } from "@cloudflare/workers-types";
+import type { D1Database as MiniflareD1Database } from "@miniflare/d1";
+import type { Adapter } from "@auth/core/adapters";
+export { up } from "./migrations";
+/**
+ * @type @cloudflare/workers-types.D1Database | @miniflare/d1.D1Database
+ */
+export type D1Database = WorkerDatabase | MiniflareD1Database;
+export declare const CREATE_USER_SQL = "INSERT INTO users (id, name, email, emailVerified, image) VALUES (?, ?, ?, ?, ?)";
+export declare const GET_USER_BY_ID_SQL = "SELECT * FROM users WHERE id = ?";
+export declare const GET_USER_BY_EMAIL_SQL = "SELECT * FROM users WHERE email = ?";
+export declare const GET_USER_BY_ACCOUNTL_SQL = "\n  SELECT u.*\n  FROM users u JOIN accounts a ON a.userId = u.id\n  WHERE a.providerAccountId = ? AND a.provider = ?";
+export declare const UPDATE_USER_BY_ID_SQL = "\n  UPDATE users \n  SET name = ?, email = ?, emailVerified = ?, image = ?\n  WHERE id = ? ";
+export declare const DELETE_USER_SQL = "DELETE FROM users WHERE id = ?";
+export declare const CREATE_SESSION_SQL = "INSERT INTO sessions (id, sessionToken, userId, expires) VALUES (?,?,?,?)";
+export declare const GET_SESSION_BY_TOKEN_SQL = "\n  SELECT id, sessionToken, userId, expires\n  FROM sessions\n  WHERE sessionToken = ?";
+export declare const UPDATE_SESSION_BY_SESSION_TOKEN_SQL = "UPDATE sessions SET expires = ? WHERE sessionToken = ?";
+export declare const DELETE_SESSION_SQL = "DELETE FROM sessions WHERE sessionToken = ?";
+export declare const DELETE_SESSION_BY_USER_ID_SQL = "DELETE FROM sessions WHERE userId = ?";
+export declare const CREATE_ACCOUNT_SQL = "\n  INSERT INTO accounts (\n    id, userId, type, provider, \n    providerAccountId, refresh_token, access_token, \n    expires_at, token_type, scope, id_token, session_state,\n    oauth_token, oauth_token_secret\n  ) \n  VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?)";
+export declare const GET_ACCOUNT_BY_ID_SQL = "SELECT * FROM accounts WHERE id = ? ";
+export declare const GET_ACCOUNT_BY_PROVIDER_AND_PROVIDER_ACCOUNT_ID_SQL = "SELECT * FROM accounts WHERE provider = ? AND providerAccountId = ?";
+export declare const DELETE_ACCOUNT_BY_PROVIDER_AND_PROVIDER_ACCOUNT_ID_SQL = "DELETE FROM accounts WHERE provider = ? AND providerAccountId = ?";
+export declare const DELETE_ACCOUNT_BY_USER_ID_SQL = "DELETE FROM accounts WHERE userId = ?";
+export declare const GET_VERIFICATION_TOKEN_BY_IDENTIFIER_AND_TOKEN_SQL = "SELECT * FROM verification_tokens WHERE identifier = ? AND token = ?";
+export declare const CREATE_VERIFICATION_TOKEN_SQL = "INSERT INTO verification_tokens (identifier, expires, token) VALUES (?,?,?)";
+export declare const DELETE_VERIFICATION_TOKEN_SQL = "DELETE FROM verification_tokens WHERE identifier = ? and token = ?";
+export declare function createRecord<RecordType>(db: D1Database, CREATE_SQL: string, bindings: any[], GET_SQL: string, getBindings: any[]): Promise<RecordType | null>;
+export declare function getRecord<RecordType>(db: D1Database, SQL: string, bindings: any[]): Promise<RecordType | null>;
+export declare function updateRecord(db: D1Database, SQL: string, bindings: any[]): Promise<import("@miniflare/d1").D1Result<unknown> | import("@cloudflare/workers-types").D1Result<unknown>>;
+export declare function deleteRecord(db: D1Database, SQL: string, bindings: any[]): Promise<void>;
+/**
+ *
+ * ## Setup
+ *
+ * This is the D1 Adapter for [`next-auth`](https://authjs.dev). This package can only be used in conjunction with the primary `next-auth` package. It is not a standalone package.
+ *
+ * ### Configure Auth.js
+ *
+ * ```javascript title="pages/api/auth/[...nextauth].js"
+ * import NextAuth from "next-auth"
+ * import { D1Adapter, up } from "@auth/d1-adapter"
+ *
+ *
+ * // For more information on each option (and a full list of options) go to
+ * // https://authjs.dev/reference/configuration/auth-options
+ * export default NextAuth({
+ *   // https://authjs.dev/reference/providers/
+ *   providers: [],
+ *   adapter: D1Adapter(env.db)
+ *   ...
+ * })
+ * ```
+ *
+ * ### Migrations
+ *
+ * Somewhere in the initialization of your application you need to run the `up(env.db)` function to create the tables in D1.
+ * It will create 4 tables if they don't already exist:
+ * `accounts`, `sessions`, `users`, `verification_tokens`.
+ *
+ * The table prefix "" is not configurable at this time.
+ *
+ * You can use something like the following to attempt the migration once each time your worker starts up.  Running migrations more than once will not erase your existing tables.
+ * ```javascript
+ * import { up } from "@auth/d1-adapter"
+ *
+ * let migrated = false;
+ * async function migrationHandle({event, resolve}) {
+ *  if(!migrated) {
+ *    try {
+ *      await up(event.platform.env.db)
+ *      migrated = true
+ *    } catch(e) {
+ *      console.log(e.cause.message, e.message)
+ *    }
+ *  }
+ *  return resolve(event)
+ * }
+ * ```
+ *
+ *
+ * You can also initialize your tables manually.  Look in [init.ts](https://github.com/nextauthjs/next-auth/packages/adapter-d1/src/migrations/init.ts) for the relevant sql.
+ * Paste and run the SQL into your D1 dashboard query tool.
+ *
+ **/
+export declare function D1Adapter(db: D1Database): Adapter;
+//# sourceMappingURL=index.d.ts.map

package/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,UAAU,IAAI,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAC7E,OAAO,KAAK,EAAE,UAAU,IAAI,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACtE,OAAO,KAAK,EACV,OAAO,EAKR,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,EAAE,EAAE,MAAM,cAAc,CAAA;AAEjC;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,cAAc,GAAG,mBAAmB,CAAA;AAI7D,eAAO,MAAM,eAAe,qFAAqF,CAAA;AACjH,eAAO,MAAM,kBAAkB,qCAAqC,CAAA;AACpE,eAAO,MAAM,qBAAqB,wCAAwC,CAAA;AAC1E,eAAO,MAAM,wBAAwB,0HAGc,CAAA;AACnD,eAAO,MAAM,qBAAqB,gGAGlB,CAAA;AAChB,eAAO,MAAM,eAAe,mCAAmC,CAAA;AAG/D,eAAO,MAAM,kBAAkB,8EAC8C,CAAA;AAC7E,eAAO,MAAM,wBAAwB,4FAGZ,CAAA;AACzB,eAAO,MAAM,mCAAmC,2DAA2D,CAAA;AAC3G,eAAO,MAAM,kBAAkB,gDAAgD,CAAA;AAC/E,eAAO,MAAM,6BAA6B,0CAA0C,CAAA;AAGpF,eAAO,MAAM,kBAAkB,uQAOQ,CAAA;AACvC,eAAO,MAAM,qBAAqB,yCAAyC,CAAA;AAC3E,eAAO,MAAM,mDAAmD,wEAAwE,CAAA;AACxI,eAAO,MAAM,sDAAsD,sEAAsE,CAAA;AACzI,eAAO,MAAM,6BAA6B,0CAA0C,CAAA;AAGpF,eAAO,MAAM,kDAAkD,yEAAyE,CAAA;AACxI,eAAO,MAAM,6BAA6B,gFAAgF,CAAA;AAC1H,eAAO,MAAM,6BAA6B,uEAAuE,CAAA;AAiCjH,wBAAsB,YAAY,CAAC,UAAU,EAC3C,EAAE,EAAE,UAAU,EACd,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,GAAG,EAAE,EACf,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,GAAG,EAAE,8BAanB;AAED,wBAAsB,SAAS,CAAC,UAAU,EACxC,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,GAAG,EAAE,GACd,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAgB5B;AAED,wBAAsB,YAAY,CAChC,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,GAAG,EAAE,8GAYhB;AAED,wBAAsB,YAAY,CAChC,EAAE,EAAE,UAAU,EACd,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,GAAG,EAAE,iBAahB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAqDI;AACJ,wBAAgB,SAAS,CAAC,EAAE,EAAE,UAAU,GAAG,OAAO,CA0LjD"}

package/index.js

@@ -0,0 +1,346 @@
+/**
+ * <div style={{display: "flex", justifyContent: "space-between", alignItems: "center", padding: 16}}>
+ *  <p style={{fontWeight: "normal"}}>An unofficial <a href="https://developers.cloudflare.com/d1/">Cloudflare D1</a> adapter for Auth.js / NextAuth.js.</p>
+ *  <a href="https://developers.cloudflare.com/d1/">
+ *   <img style={{display: "block"}} src="/img/adapters/d1.svg" width="48" />
+ *  </a>
+ * </div>
+ *
+ * ## Warning
+ * This adapter is not developed or maintained by Clouflare and they haven't declared the D1 api stable.  The author will make an effort to keep this adapter up to date.
+ * The adapter is compatible with the D1 api as of March 22, 2023.
+ *
+ * ## Installation
+ *
+ * ```bash npm2yarn2pnpm
+ * npm install next-auth @auth/d1-adapter
+ * ```
+ *
+ * @module @auth/d1-adapter
+ */
+export { up } from "./migrations";
+// all the sqls
+// USER
+export const CREATE_USER_SQL = `INSERT INTO users (id, name, email, emailVerified, image) VALUES (?, ?, ?, ?, ?)`;
+export const GET_USER_BY_ID_SQL = `SELECT * FROM users WHERE id = ?`;
+export const GET_USER_BY_EMAIL_SQL = `SELECT * FROM users WHERE email = ?`;
+export const GET_USER_BY_ACCOUNTL_SQL = `
+  SELECT u.*
+  FROM users u JOIN accounts a ON a.userId = u.id
+  WHERE a.providerAccountId = ? AND a.provider = ?`;
+export const UPDATE_USER_BY_ID_SQL = `
+  UPDATE users 
+  SET name = ?, email = ?, emailVerified = ?, image = ?
+  WHERE id = ? `;
+export const DELETE_USER_SQL = `DELETE FROM users WHERE id = ?`;
+// SESSION
+export const CREATE_SESSION_SQL = "INSERT INTO sessions (id, sessionToken, userId, expires) VALUES (?,?,?,?)";
+export const GET_SESSION_BY_TOKEN_SQL = `
+  SELECT id, sessionToken, userId, expires
+  FROM sessions
+  WHERE sessionToken = ?`;
+export const UPDATE_SESSION_BY_SESSION_TOKEN_SQL = `UPDATE sessions SET expires = ? WHERE sessionToken = ?`;
+export const DELETE_SESSION_SQL = `DELETE FROM sessions WHERE sessionToken = ?`;
+export const DELETE_SESSION_BY_USER_ID_SQL = `DELETE FROM sessions WHERE userId = ?`;
+// ACCOUNT
+export const CREATE_ACCOUNT_SQL = `
+  INSERT INTO accounts (
+    id, userId, type, provider, 
+    providerAccountId, refresh_token, access_token, 
+    expires_at, token_type, scope, id_token, session_state,
+    oauth_token, oauth_token_secret
+  ) 
+  VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?)`;
+export const GET_ACCOUNT_BY_ID_SQL = `SELECT * FROM accounts WHERE id = ? `;
+export const GET_ACCOUNT_BY_PROVIDER_AND_PROVIDER_ACCOUNT_ID_SQL = `SELECT * FROM accounts WHERE provider = ? AND providerAccountId = ?`;
+export const DELETE_ACCOUNT_BY_PROVIDER_AND_PROVIDER_ACCOUNT_ID_SQL = `DELETE FROM accounts WHERE provider = ? AND providerAccountId = ?`;
+export const DELETE_ACCOUNT_BY_USER_ID_SQL = `DELETE FROM accounts WHERE userId = ?`;
+// VERIFICATION_TOKEN
+export const GET_VERIFICATION_TOKEN_BY_IDENTIFIER_AND_TOKEN_SQL = `SELECT * FROM verification_tokens WHERE identifier = ? AND token = ?`;
+export const CREATE_VERIFICATION_TOKEN_SQL = `INSERT INTO verification_tokens (identifier, expires, token) VALUES (?,?,?)`;
+export const DELETE_VERIFICATION_TOKEN_SQL = `DELETE FROM verification_tokens WHERE identifier = ? and token = ?`;
+// helper functions
+// isDate is borrowed from the supabase adapter, graciously
+// depending on error messages ("Invalid Date") is always precarious, but probably fine for a built in native like Date
+function isDate(date) {
+    return (new Date(date).toString() !== "Invalid Date" && !isNaN(Date.parse(date)));
+}
+// format is borrowed from the supabase adapter, graciously
+function format(obj) {
+    for (const [key, value] of Object.entries(obj)) {
+        if (value === null) {
+            // eslint-disable-next-line @typescript-eslint/no-dynamic-delete
+            delete obj[key];
+        }
+        if (isDate(value)) {
+            obj[key] = new Date(value);
+        }
+    }
+    return obj;
+}
+// D1 doesnt like undefined, it wants null when calling bind
+function cleanBindings(bindings) {
+    return bindings.map((e) => (e === undefined ? null : e));
+}
+export async function createRecord(db, CREATE_SQL, bindings, GET_SQL, getBindings) {
+    try {
+        bindings = cleanBindings(bindings);
+        await db
+            .prepare(CREATE_SQL)
+            .bind(...bindings)
+            .run();
+        return await getRecord(db, GET_SQL, getBindings);
+    }
+    catch (e) {
+        console.error(e.message, e.cause?.message);
+        throw e;
+    }
+}
+export async function getRecord(db, SQL, bindings) {
+    try {
+        bindings = cleanBindings(bindings);
+        const res = await db
+            .prepare(SQL)
+            .bind(...bindings)
+            .first();
+        if (res) {
+            return format(res);
+        }
+        else {
+            return null;
+        }
+    }
+    catch (e) {
+        console.error(e.message, e.cause?.message);
+        throw e;
+    }
+}
+export async function updateRecord(db, SQL, bindings) {
+    try {
+        bindings = cleanBindings(bindings);
+        return await db
+            .prepare(SQL)
+            .bind(...bindings)
+            .run();
+    }
+    catch (e) {
+        console.error(e.message, e.cause?.message);
+        throw e;
+    }
+}
+export async function deleteRecord(db, SQL, bindings) {
+    // eslint-disable-next-line no-useless-catch
+    try {
+        bindings = cleanBindings(bindings);
+        await db
+            .prepare(SQL)
+            .bind(...bindings)
+            .run();
+    }
+    catch (e) {
+        console.error(e.message, e.cause?.message);
+        throw e;
+    }
+}
+/**
+ *
+ * ## Setup
+ *
+ * This is the D1 Adapter for [`next-auth`](https://authjs.dev). This package can only be used in conjunction with the primary `next-auth` package. It is not a standalone package.
+ *
+ * ### Configure Auth.js
+ *
+ * ```javascript title="pages/api/auth/[...nextauth].js"
+ * import NextAuth from "next-auth"
+ * import { D1Adapter, up } from "@auth/d1-adapter"
+ *
+ *
+ * // For more information on each option (and a full list of options) go to
+ * // https://authjs.dev/reference/configuration/auth-options
+ * export default NextAuth({
+ *   // https://authjs.dev/reference/providers/
+ *   providers: [],
+ *   adapter: D1Adapter(env.db)
+ *   ...
+ * })
+ * ```
+ *
+ * ### Migrations
+ *
+ * Somewhere in the initialization of your application you need to run the `up(env.db)` function to create the tables in D1.
+ * It will create 4 tables if they don't already exist:
+ * `accounts`, `sessions`, `users`, `verification_tokens`.
+ *
+ * The table prefix "" is not configurable at this time.
+ *
+ * You can use something like the following to attempt the migration once each time your worker starts up.  Running migrations more than once will not erase your existing tables.
+ * ```javascript
+ * import { up } from "@auth/d1-adapter"
+ *
+ * let migrated = false;
+ * async function migrationHandle({event, resolve}) {
+ *  if(!migrated) {
+ *    try {
+ *      await up(event.platform.env.db)
+ *      migrated = true
+ *    } catch(e) {
+ *      console.log(e.cause.message, e.message)
+ *    }
+ *  }
+ *  return resolve(event)
+ * }
+ * ```
+ *
+ *
+ * You can also initialize your tables manually.  Look in [init.ts](https://github.com/nextauthjs/next-auth/packages/adapter-d1/src/migrations/init.ts) for the relevant sql.
+ * Paste and run the SQL into your D1 dashboard query tool.
+ *
+ **/
+export function D1Adapter(db) {
+    // we need to run migrations if we dont have the right tables
+    return {
+        async createUser(user) {
+            const id = crypto.randomUUID();
+            const createBindings = [
+                id,
+                user.name,
+                user.email,
+                user.emailVerified?.toISOString(),
+                user.image,
+            ];
+            const getBindings = [id];
+            const newUser = await createRecord(db, CREATE_USER_SQL, createBindings, GET_USER_BY_ID_SQL, getBindings);
+            if (newUser)
+                return newUser;
+            throw new Error("Error creating user: Cannot get user after creation.");
+        },
+        async getUser(id) {
+            return await getRecord(db, GET_USER_BY_ID_SQL, [id]);
+        },
+        async getUserByEmail(email) {
+            return await getRecord(db, GET_USER_BY_EMAIL_SQL, [email]);
+        },
+        async getUserByAccount({ providerAccountId, provider }) {
+            return await getRecord(db, GET_USER_BY_ACCOUNTL_SQL, [
+                providerAccountId,
+                provider,
+            ]);
+        },
+        async updateUser(user) {
+            const params = await getRecord(db, GET_USER_BY_ID_SQL, [
+                user.id,
+            ]);
+            if (params) {
+                // copy any properties not in the update into the existing one and use that for bind params
+                // covers the scenario where the user arg doesnt have all of the current users properties
+                Object.assign(params, user);
+                const res = await updateRecord(db, UPDATE_USER_BY_ID_SQL, [
+                    params.name,
+                    params.email,
+                    params.emailVerified?.toISOString(),
+                    params.image,
+                    params.id,
+                ]);
+                if (res.success) {
+                    // we could probably just return
+                    const user = await getRecord(db, GET_USER_BY_ID_SQL, [
+                        params.id,
+                    ]);
+                    if (user)
+                        return user;
+                    throw new Error("Error updating user: Cannot get user after updating.");
+                }
+            }
+            throw new Error("Error updating user: Failed to run the update SQL.");
+        },
+        async deleteUser(userId) {
+            // this should probably be in a db.batch but batch has problems right now in miniflare
+            // no multi line sql statements
+            await deleteRecord(db, DELETE_ACCOUNT_BY_USER_ID_SQL, [userId]);
+            await deleteRecord(db, DELETE_SESSION_BY_USER_ID_SQL, [userId]);
+            await deleteRecord(db, DELETE_USER_SQL, [userId]);
+            return null;
+        },
+        async linkAccount(a) {
+            // convert user_id to userId and provider_account_id to providerAccountId
+            const id = crypto.randomUUID();
+            const createBindings = [
+                id,
+                a.userId,
+                a.type,
+                a.provider,
+                a.providerAccountId,
+                a.refresh_token,
+                a.access_token,
+                a.expires_at,
+                a.token_type,
+                a.scope,
+                a.id_token,
+                a.session_state,
+                a.oauth_token ?? null,
+                a.oauth_token_secret ?? null,
+            ];
+            const getBindings = [id];
+            return await createRecord(db, CREATE_ACCOUNT_SQL, createBindings, GET_ACCOUNT_BY_ID_SQL, getBindings);
+        },
+        async unlinkAccount({ providerAccountId, provider }) {
+            await deleteRecord(db, DELETE_ACCOUNT_BY_PROVIDER_AND_PROVIDER_ACCOUNT_ID_SQL, [provider, providerAccountId]);
+        },
+        async createSession({ sessionToken, userId, expires }) {
+            const id = crypto.randomUUID();
+            const createBindings = [id, sessionToken, userId, expires.toISOString()];
+            const getBindings = [sessionToken];
+            const session = await createRecord(db, CREATE_SESSION_SQL, createBindings, GET_SESSION_BY_TOKEN_SQL, getBindings);
+            if (session)
+                return session;
+            throw new Error(`Couldn't create session`);
+        },
+        async getSessionAndUser(sessionToken) {
+            const session = await getRecord(db, GET_SESSION_BY_TOKEN_SQL, [sessionToken]);
+            // no session?  no user!
+            if (session === null)
+                return null;
+            // this shouldnt happen, but just in case
+            const user = await getRecord(db, GET_USER_BY_ID_SQL, [
+                session.userId,
+            ]);
+            if (user === null)
+                return null;
+            return { session, user };
+        },
+        async updateSession({ sessionToken, expires }) {
+            // kinda strange that we have to deal with an undefined expires,
+            // we dont have any policy to enforce, lets just expire it now.
+            if (expires === undefined) {
+                await deleteRecord(db, DELETE_SESSION_SQL, [sessionToken]);
+                return null;
+            }
+            const session = await getRecord(db, GET_SESSION_BY_TOKEN_SQL, [sessionToken]);
+            if (!session)
+                return null;
+            session.expires = expires;
+            await updateRecord(db, UPDATE_SESSION_BY_SESSION_TOKEN_SQL, [
+                expires?.toISOString(),
+                sessionToken,
+            ]);
+            return await db
+                .prepare(UPDATE_SESSION_BY_SESSION_TOKEN_SQL)
+                .bind(expires?.toISOString(), sessionToken)
+                .first();
+        },
+        async deleteSession(sessionToken) {
+            await deleteRecord(db, DELETE_SESSION_SQL, [sessionToken]);
+            return null;
+        },
+        async createVerificationToken({ identifier, expires, token }) {
+            return await createRecord(db, CREATE_VERIFICATION_TOKEN_SQL, [identifier, expires.toISOString(), token], GET_VERIFICATION_TOKEN_BY_IDENTIFIER_AND_TOKEN_SQL, [identifier, token]);
+        },
+        async useVerificationToken({ identifier, token }) {
+            const verificationToken = await getRecord(db, GET_VERIFICATION_TOKEN_BY_IDENTIFIER_AND_TOKEN_SQL, [identifier, token]);
+            if (!verificationToken)
+                return null;
+            await deleteRecord(db, DELETE_VERIFICATION_TOKEN_SQL, [identifier, token]);
+            return verificationToken;
+        },
+    };
+}

package/migrations.d.ts

@@ -0,0 +1,10 @@
+import type { D1Database } from ".";
+export declare const upSQLStatements: string[];
+export declare const down: string[];
+/**
+ *
+ * @param db
+ */
+declare function up(db: D1Database): Promise<void>;
+export { up };
+//# sourceMappingURL=migrations.d.ts.map

package/migrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["src/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,GAAG,CAAA;AAEnC,eAAO,MAAM,eAAe,UAuC3B,CAAA;AAED,eAAO,MAAM,IAAI,UAKhB,CAAA;AAED;;;GAGG;AACH,iBAAe,EAAE,CAAC,EAAE,EAAE,UAAU,iBAS/B;AAED,OAAO,EAAE,EAAE,EAAE,CAAA"}

package/migrations.js

@@ -0,0 +1,62 @@
+export const upSQLStatements = [
+    `CREATE TABLE IF NOT EXISTS "accounts" (
+    "id" text NOT NULL,
+    "userId" text NOT NULL DEFAULT NULL,
+    "type" text NOT NULL DEFAULT NULL,
+    "provider" text NOT NULL DEFAULT NULL,
+    "providerAccountId" text NOT NULL DEFAULT NULL,
+    "refresh_token" text DEFAULT NULL,
+    "access_token" text DEFAULT NULL,
+    "expires_at" number DEFAULT NULL,
+    "token_type" text DEFAULT NULL,
+    "scope" text DEFAULT NULL,
+    "id_token" text DEFAULT NULL,
+    "session_state" text DEFAULT NULL,
+    "oauth_token_secret" text DEFAULT NULL,
+    "oauth_token" text DEFAULT NULL,
+    PRIMARY KEY (id)
+);`,
+    `CREATE TABLE IF NOT EXISTS "sessions" (
+    "id" text NOT NULL,
+    "sessionToken" text NOT NULL,
+    "userId" text NOT NULL DEFAULT NULL,
+    "expires" datetime NOT NULL DEFAULT NULL, 
+    PRIMARY KEY (sessionToken)
+);`,
+    `CREATE TABLE IF NOT EXISTS "users" (
+    "id" text NOT NULL DEFAULT '',
+    "name" text DEFAULT NULL,
+    "email" text DEFAULT NULL,
+    "emailVerified" datetime DEFAULT NULL,
+    "image" text DEFAULT NULL, 
+    PRIMARY KEY (id)
+);`,
+    `CREATE TABLE IF NOT EXISTS "verification_tokens" (
+    "identifier" text NOT NULL,
+    "token" text NOT NULL DEFAULT NULL,
+    "expires" datetime NOT NULL DEFAULT NULL, 
+    PRIMARY KEY (token)
+);`,
+];
+export const down = [
+    `DROP TABLE IF EXISTS "accounts";`,
+    `DROP TABLE IF EXISTS "sessions";`,
+    `DROP TABLE IF EXISTS "users";`,
+    `DROP TABLE IF EXISTS "verification_token";`,
+];
+/**
+ *
+ * @param db
+ */
+async function up(db) {
+    // run the migration
+    upSQLStatements.forEach(async (sql) => {
+        try {
+            const res = await db.prepare(sql).run();
+        }
+        catch (e) {
+            console.error(e.cause?.message, e.message);
+        }
+    });
+}
+export { up };

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@auth/d1-adapter",
+  "version": "0.2.0",
+  "description": "A Cloudflare D1 adapter for Auth.js",
+  "homepage": "https://authjs.dev",
+  "repository": "https://github.com/nextauthjs/next-auth",
+  "bugs": {
+    "url": "https://github.com/nextauthjs/next-auth/issues"
+  },
+  "author": "Josh Schlesser <josh@schlesser.dev>",
+  "contributors": [
+    "Thang Huu Vu <hi@thvu.dev>"
+  ],
+  "license": "ISC",
+  "keywords": [
+    "next-auth",
+    "@auth",
+    "Auth.js",
+    "next.js",
+    "oauth",
+    "d1"
+  ],
+  "type": "module",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./index.d.ts",
+      "import": "./index.js"
+    }
+  },
+  "files": [
+    "*.d.ts*",
+    "*.js",
+    "src"
+  ],
+  "private": false,
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@auth/core": "0.15.0"
+  },
+  "devDependencies": {
+    "@cloudflare/workers-types": "^4.20230321.0",
+    "@miniflare/d1": "^2.12.2",
+    "better-sqlite3": "^7.0.0",
+    "jest": "^29.3.0",
+    "@auth/adapter-test": "0.0.0",
+    "@auth/tsconfig": "0.0.0"
+  },
+  "jest": {
+    "preset": "@auth/adapter-test/jest"
+  },
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist",
+    "test": "jest"
+  }
+}

package/src/index.ts

@@ -0,0 +1,432 @@
+/**
+ * <div style={{display: "flex", justifyContent: "space-between", alignItems: "center", padding: 16}}>
+ *  <p style={{fontWeight: "normal"}}>An unofficial <a href="https://developers.cloudflare.com/d1/">Cloudflare D1</a> adapter for Auth.js / NextAuth.js.</p>
+ *  <a href="https://developers.cloudflare.com/d1/">
+ *   <img style={{display: "block"}} src="/img/adapters/d1.svg" width="48" />
+ *  </a>
+ * </div>
+ *
+ * ## Warning
+ * This adapter is not developed or maintained by Clouflare and they haven't declared the D1 api stable.  The author will make an effort to keep this adapter up to date.
+ * The adapter is compatible with the D1 api as of March 22, 2023.
+ *
+ * ## Installation
+ *
+ * ```bash npm2yarn2pnpm
+ * npm install next-auth @auth/d1-adapter
+ * ```
+ *
+ * @module @auth/d1-adapter
+ */
+
+import type { D1Database as WorkerDatabase } from "@cloudflare/workers-types"
+import type { D1Database as MiniflareD1Database } from "@miniflare/d1"
+import type {
+  Adapter,
+  AdapterSession,
+  AdapterUser,
+  AdapterAccount,
+  VerificationToken as AdapterVerificationToken,
+} from "@auth/core/adapters"
+
+export { up } from "./migrations"
+
+/**
+ * @type @cloudflare/workers-types.D1Database | @miniflare/d1.D1Database
+ */
+export type D1Database = WorkerDatabase | MiniflareD1Database
+
+// all the sqls
+// USER
+export const CREATE_USER_SQL = `INSERT INTO users (id, name, email, emailVerified, image) VALUES (?, ?, ?, ?, ?)`
+export const GET_USER_BY_ID_SQL = `SELECT * FROM users WHERE id = ?`
+export const GET_USER_BY_EMAIL_SQL = `SELECT * FROM users WHERE email = ?`
+export const GET_USER_BY_ACCOUNTL_SQL = `
+  SELECT u.*
+  FROM users u JOIN accounts a ON a.userId = u.id
+  WHERE a.providerAccountId = ? AND a.provider = ?`
+export const UPDATE_USER_BY_ID_SQL = `
+  UPDATE users 
+  SET name = ?, email = ?, emailVerified = ?, image = ?
+  WHERE id = ? `
+export const DELETE_USER_SQL = `DELETE FROM users WHERE id = ?`
+
+// SESSION
+export const CREATE_SESSION_SQL =
+  "INSERT INTO sessions (id, sessionToken, userId, expires) VALUES (?,?,?,?)"
+export const GET_SESSION_BY_TOKEN_SQL = `
+  SELECT id, sessionToken, userId, expires
+  FROM sessions
+  WHERE sessionToken = ?`
+export const UPDATE_SESSION_BY_SESSION_TOKEN_SQL = `UPDATE sessions SET expires = ? WHERE sessionToken = ?`
+export const DELETE_SESSION_SQL = `DELETE FROM sessions WHERE sessionToken = ?`
+export const DELETE_SESSION_BY_USER_ID_SQL = `DELETE FROM sessions WHERE userId = ?`
+
+// ACCOUNT
+export const CREATE_ACCOUNT_SQL = `
+  INSERT INTO accounts (
+    id, userId, type, provider, 
+    providerAccountId, refresh_token, access_token, 
+    expires_at, token_type, scope, id_token, session_state,
+    oauth_token, oauth_token_secret
+  ) 
+  VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?)`
+export const GET_ACCOUNT_BY_ID_SQL = `SELECT * FROM accounts WHERE id = ? `
+export const GET_ACCOUNT_BY_PROVIDER_AND_PROVIDER_ACCOUNT_ID_SQL = `SELECT * FROM accounts WHERE provider = ? AND providerAccountId = ?`
+export const DELETE_ACCOUNT_BY_PROVIDER_AND_PROVIDER_ACCOUNT_ID_SQL = `DELETE FROM accounts WHERE provider = ? AND providerAccountId = ?`
+export const DELETE_ACCOUNT_BY_USER_ID_SQL = `DELETE FROM accounts WHERE userId = ?`
+
+// VERIFICATION_TOKEN
+export const GET_VERIFICATION_TOKEN_BY_IDENTIFIER_AND_TOKEN_SQL = `SELECT * FROM verification_tokens WHERE identifier = ? AND token = ?`
+export const CREATE_VERIFICATION_TOKEN_SQL = `INSERT INTO verification_tokens (identifier, expires, token) VALUES (?,?,?)`
+export const DELETE_VERIFICATION_TOKEN_SQL = `DELETE FROM verification_tokens WHERE identifier = ? and token = ?`
+
+// helper functions
+
+// isDate is borrowed from the supabase adapter, graciously
+// depending on error messages ("Invalid Date") is always precarious, but probably fine for a built in native like Date
+function isDate(date: any) {
+  return (
+    new Date(date).toString() !== "Invalid Date" && !isNaN(Date.parse(date))
+  )
+}
+
+// format is borrowed from the supabase adapter, graciously
+function format<T>(obj: Record<string, any>): T {
+  for (const [key, value] of Object.entries(obj)) {
+    if (value === null) {
+      // eslint-disable-next-line @typescript-eslint/no-dynamic-delete
+      delete obj[key]
+    }
+
+    if (isDate(value)) {
+      obj[key] = new Date(value)
+    }
+  }
+
+  return obj as T
+}
+
+// D1 doesnt like undefined, it wants null when calling bind
+function cleanBindings(bindings: any[]) {
+  return bindings.map((e) => (e === undefined ? null : e))
+}
+
+export async function createRecord<RecordType>(
+  db: D1Database,
+  CREATE_SQL: string,
+  bindings: any[],
+  GET_SQL: string,
+  getBindings: any[]
+) {
+  try {
+    bindings = cleanBindings(bindings)
+    await db
+      .prepare(CREATE_SQL)
+      .bind(...bindings)
+      .run()
+    return await getRecord<RecordType>(db, GET_SQL, getBindings)
+  } catch (e: any) {
+    console.error(e.message, e.cause?.message)
+    throw e
+  }
+}
+
+export async function getRecord<RecordType>(
+  db: D1Database,
+  SQL: string,
+  bindings: any[]
+): Promise<RecordType | null> {
+  try {
+    bindings = cleanBindings(bindings)
+    const res: any = await db
+      .prepare(SQL)
+      .bind(...bindings)
+      .first()
+    if (res) {
+      return format<RecordType>(res)
+    } else {
+      return null
+    }
+  } catch (e: any) {
+    console.error(e.message, e.cause?.message)
+    throw e
+  }
+}
+
+export async function updateRecord(
+  db: D1Database,
+  SQL: string,
+  bindings: any[]
+) {
+  try {
+    bindings = cleanBindings(bindings)
+    return await db
+      .prepare(SQL)
+      .bind(...bindings)
+      .run()
+  } catch (e: any) {
+    console.error(e.message, e.cause?.message)
+    throw e
+  }
+}
+
+export async function deleteRecord(
+  db: D1Database,
+  SQL: string,
+  bindings: any[]
+) {
+  // eslint-disable-next-line no-useless-catch
+  try {
+    bindings = cleanBindings(bindings)
+    await db
+      .prepare(SQL)
+      .bind(...bindings)
+      .run()
+  } catch (e: any) {
+    console.error(e.message, e.cause?.message)
+    throw e
+  }
+}
+
+/**
+ *
+ * ## Setup
+ *
+ * This is the D1 Adapter for [`next-auth`](https://authjs.dev). This package can only be used in conjunction with the primary `next-auth` package. It is not a standalone package.
+ *
+ * ### Configure Auth.js
+ *
+ * ```javascript title="pages/api/auth/[...nextauth].js"
+ * import NextAuth from "next-auth"
+ * import { D1Adapter, up } from "@auth/d1-adapter"
+ *
+ *
+ * // For more information on each option (and a full list of options) go to
+ * // https://authjs.dev/reference/configuration/auth-options
+ * export default NextAuth({
+ *   // https://authjs.dev/reference/providers/
+ *   providers: [],
+ *   adapter: D1Adapter(env.db)
+ *   ...
+ * })
+ * ```
+ *
+ * ### Migrations
+ *
+ * Somewhere in the initialization of your application you need to run the `up(env.db)` function to create the tables in D1.
+ * It will create 4 tables if they don't already exist:
+ * `accounts`, `sessions`, `users`, `verification_tokens`.
+ *
+ * The table prefix "" is not configurable at this time.
+ *
+ * You can use something like the following to attempt the migration once each time your worker starts up.  Running migrations more than once will not erase your existing tables.
+ * ```javascript
+ * import { up } from "@auth/d1-adapter"
+ *
+ * let migrated = false;
+ * async function migrationHandle({event, resolve}) {
+ *  if(!migrated) {
+ *    try {
+ *      await up(event.platform.env.db)
+ *      migrated = true
+ *    } catch(e) {
+ *      console.log(e.cause.message, e.message)
+ *    }
+ *  }
+ *  return resolve(event)
+ * }
+ * ```
+ *
+ *
+ * You can also initialize your tables manually.  Look in [init.ts](https://github.com/nextauthjs/next-auth/packages/adapter-d1/src/migrations/init.ts) for the relevant sql.
+ * Paste and run the SQL into your D1 dashboard query tool.
+ *
+ **/
+export function D1Adapter(db: D1Database): Adapter {
+  // we need to run migrations if we dont have the right tables
+
+  return {
+    async createUser(user) {
+      const id: string = crypto.randomUUID()
+      const createBindings = [
+        id,
+        user.name,
+        user.email,
+        user.emailVerified?.toISOString(),
+        user.image,
+      ]
+      const getBindings = [id]
+
+      const newUser = await createRecord<AdapterUser>(
+        db,
+        CREATE_USER_SQL,
+        createBindings,
+        GET_USER_BY_ID_SQL,
+        getBindings
+      )
+      if (newUser) return newUser
+      throw new Error("Error creating user: Cannot get user after creation.")
+    },
+    async getUser(id) {
+      return await getRecord<AdapterUser>(db, GET_USER_BY_ID_SQL, [id])
+    },
+    async getUserByEmail(email) {
+      return await getRecord<AdapterUser>(db, GET_USER_BY_EMAIL_SQL, [email])
+    },
+    async getUserByAccount({ providerAccountId, provider }) {
+      return await getRecord<AdapterUser>(db, GET_USER_BY_ACCOUNTL_SQL, [
+        providerAccountId,
+        provider,
+      ])
+    },
+    async updateUser(user) {
+      const params = await getRecord<AdapterUser>(db, GET_USER_BY_ID_SQL, [
+        user.id,
+      ])
+      if (params) {
+        // copy any properties not in the update into the existing one and use that for bind params
+        // covers the scenario where the user arg doesnt have all of the current users properties
+        Object.assign(params, user)
+        const res = await updateRecord(db, UPDATE_USER_BY_ID_SQL, [
+          params.name,
+          params.email,
+          params.emailVerified?.toISOString(),
+          params.image,
+          params.id,
+        ])
+        if (res.success) {
+          // we could probably just return
+          const user = await getRecord<AdapterUser>(db, GET_USER_BY_ID_SQL, [
+            params.id,
+          ])
+          if (user) return user
+          throw new Error(
+            "Error updating user: Cannot get user after updating."
+          )
+        }
+      }
+      throw new Error("Error updating user: Failed to run the update SQL.")
+    },
+    async deleteUser(userId) {
+      // this should probably be in a db.batch but batch has problems right now in miniflare
+      // no multi line sql statements
+      await deleteRecord(db, DELETE_ACCOUNT_BY_USER_ID_SQL, [userId])
+      await deleteRecord(db, DELETE_SESSION_BY_USER_ID_SQL, [userId])
+      await deleteRecord(db, DELETE_USER_SQL, [userId])
+      return null
+    },
+    async linkAccount(a) {
+      // convert user_id to userId and provider_account_id to providerAccountId
+      const id = crypto.randomUUID()
+      const createBindings = [
+        id,
+        a.userId,
+        a.type,
+        a.provider,
+        a.providerAccountId,
+        a.refresh_token,
+        a.access_token,
+        a.expires_at,
+        a.token_type,
+        a.scope,
+        a.id_token,
+        a.session_state,
+        a.oauth_token ?? null,
+        a.oauth_token_secret ?? null,
+      ]
+      const getBindings = [id]
+      return await createRecord<AdapterAccount>(
+        db,
+        CREATE_ACCOUNT_SQL,
+        createBindings,
+        GET_ACCOUNT_BY_ID_SQL,
+        getBindings
+      )
+    },
+    async unlinkAccount({ providerAccountId, provider }) {
+      await deleteRecord(
+        db,
+        DELETE_ACCOUNT_BY_PROVIDER_AND_PROVIDER_ACCOUNT_ID_SQL,
+        [provider, providerAccountId]
+      )
+    },
+    async createSession({ sessionToken, userId, expires }) {
+      const id = crypto.randomUUID()
+      const createBindings = [id, sessionToken, userId, expires.toISOString()]
+      const getBindings = [sessionToken]
+      const session = await createRecord<AdapterSession>(
+        db,
+        CREATE_SESSION_SQL,
+        createBindings,
+        GET_SESSION_BY_TOKEN_SQL,
+        getBindings
+      )
+      if (session) return session
+      throw new Error(`Couldn't create session`)
+    },
+    async getSessionAndUser(sessionToken) {
+      const session: any = await getRecord<AdapterSession>(
+        db,
+        GET_SESSION_BY_TOKEN_SQL,
+        [sessionToken]
+      )
+      // no session?  no user!
+      if (session === null) return null
+
+      // this shouldnt happen, but just in case
+      const user = await getRecord<AdapterUser>(db, GET_USER_BY_ID_SQL, [
+        session.userId,
+      ])
+      if (user === null) return null
+
+      return { session, user }
+    },
+    async updateSession({ sessionToken, expires }) {
+      // kinda strange that we have to deal with an undefined expires,
+      // we dont have any policy to enforce, lets just expire it now.
+      if (expires === undefined) {
+        await deleteRecord(db, DELETE_SESSION_SQL, [sessionToken])
+        return null
+      }
+      const session = await getRecord<AdapterSession>(
+        db,
+        GET_SESSION_BY_TOKEN_SQL,
+        [sessionToken]
+      )
+      if (!session) return null
+      session.expires = expires
+      await updateRecord(db, UPDATE_SESSION_BY_SESSION_TOKEN_SQL, [
+        expires?.toISOString(),
+        sessionToken,
+      ])
+      return await db
+        .prepare(UPDATE_SESSION_BY_SESSION_TOKEN_SQL)
+        .bind(expires?.toISOString(), sessionToken)
+        .first()
+    },
+    async deleteSession(sessionToken) {
+      await deleteRecord(db, DELETE_SESSION_SQL, [sessionToken])
+      return null
+    },
+    async createVerificationToken({ identifier, expires, token }) {
+      return await createRecord(
+        db,
+        CREATE_VERIFICATION_TOKEN_SQL,
+        [identifier, expires.toISOString(), token],
+        GET_VERIFICATION_TOKEN_BY_IDENTIFIER_AND_TOKEN_SQL,
+        [identifier, token]
+      )
+    },
+    async useVerificationToken({ identifier, token }) {
+      const verificationToken = await getRecord<AdapterVerificationToken>(
+        db,
+        GET_VERIFICATION_TOKEN_BY_IDENTIFIER_AND_TOKEN_SQL,
+        [identifier, token]
+      )
+      if (!verificationToken) return null
+      await deleteRecord(db, DELETE_VERIFICATION_TOKEN_SQL, [identifier, token])
+      return verificationToken
+    },
+  }
+}

package/src/migrations.ts

@@ -0,0 +1,66 @@
+import type { D1Database } from "."
+
+export const upSQLStatements = [
+  `CREATE TABLE IF NOT EXISTS "accounts" (
+    "id" text NOT NULL,
+    "userId" text NOT NULL DEFAULT NULL,
+    "type" text NOT NULL DEFAULT NULL,
+    "provider" text NOT NULL DEFAULT NULL,
+    "providerAccountId" text NOT NULL DEFAULT NULL,
+    "refresh_token" text DEFAULT NULL,
+    "access_token" text DEFAULT NULL,
+    "expires_at" number DEFAULT NULL,
+    "token_type" text DEFAULT NULL,
+    "scope" text DEFAULT NULL,
+    "id_token" text DEFAULT NULL,
+    "session_state" text DEFAULT NULL,
+    "oauth_token_secret" text DEFAULT NULL,
+    "oauth_token" text DEFAULT NULL,
+    PRIMARY KEY (id)
+);`,
+  `CREATE TABLE IF NOT EXISTS "sessions" (
+    "id" text NOT NULL,
+    "sessionToken" text NOT NULL,
+    "userId" text NOT NULL DEFAULT NULL,
+    "expires" datetime NOT NULL DEFAULT NULL, 
+    PRIMARY KEY (sessionToken)
+);`,
+  `CREATE TABLE IF NOT EXISTS "users" (
+    "id" text NOT NULL DEFAULT '',
+    "name" text DEFAULT NULL,
+    "email" text DEFAULT NULL,
+    "emailVerified" datetime DEFAULT NULL,
+    "image" text DEFAULT NULL, 
+    PRIMARY KEY (id)
+);`,
+  `CREATE TABLE IF NOT EXISTS "verification_tokens" (
+    "identifier" text NOT NULL,
+    "token" text NOT NULL DEFAULT NULL,
+    "expires" datetime NOT NULL DEFAULT NULL, 
+    PRIMARY KEY (token)
+);`,
+]
+
+export const down = [
+  `DROP TABLE IF EXISTS "accounts";`,
+  `DROP TABLE IF EXISTS "sessions";`,
+  `DROP TABLE IF EXISTS "users";`,
+  `DROP TABLE IF EXISTS "verification_token";`,
+]
+
+/**
+ *
+ * @param db
+ */
+async function up(db: D1Database) {
+  // run the migration
+  upSQLStatements.forEach(async (sql) => {
+    try {
+      const res = await db.prepare(sql).run()
+    } catch (e: any) {
+      console.error(e.cause?.message, e.message)
+    }
+  })
+}
+
+export { up }