@lobehub/lobehub 2.0.0-next.354 → 2.0.0-next.356

package/src/app/(backend)/api/auth/adapter/route.ts

@@ -1,137 +0,0 @@
-import debug from 'debug';
-import { type NextRequest, NextResponse } from 'next/server';
-
-import { serverDBEnv } from '@/config/db';
-import { serverDB } from '@/database/server';
-import { dateKeys } from '@/libs/next-auth/adapter';
-import { NextAuthUserService } from '@/server/services/nextAuthUser';
-
-const log = debug('lobe-next-auth:api:auth:adapter');
-
-/**
- * @description Process the db query for the NextAuth adapter.
- * Returns the db query result directly and let NextAuth handle the raw results.
- * @returns {
- *  success: boolean; // Only return false if the database query fails or the action is invalid.
- *  data?: any;
- *  error?: string;
- * }
- */
-export async function POST(req: NextRequest) {
-  try {
-    // try validate the request
-    if (
-      !req.headers.get('Authorization') ||
-      req.headers.get('Authorization')?.trim() !== `Bearer ${serverDBEnv.KEY_VAULTS_SECRET}`
-    ) {
-      log('Unauthorized request, missing or invalid Authorization header');
-      return NextResponse.json({ error: 'Unauthorized', success: false }, { status: 401 });
-    }
-
-    // Parse the request body
-    const data = await req.json();
-    log('Received request data:', data);
-    // Preprocess
-    if (data?.data) {
-      for (const key of dateKeys) {
-        if (data?.data && data.data[key]) {
-          data.data[key] = new Date(data.data[key]);
-          continue;
-        }
-      }
-    }
-    const service = new NextAuthUserService(serverDB);
-    let result;
-    switch (data.action) {
-      case 'createAuthenticator': {
-        result = await service.createAuthenticator(data.data);
-        break;
-      }
-      case 'createSession': {
-        result = await service.createSession(data.data);
-        break;
-      }
-      case 'createUser': {
-        result = await service.createUser(data.data);
-        break;
-      }
-      case 'createVerificationToken': {
-        result = await service.createVerificationToken(data.data);
-        break;
-      }
-      case 'deleteSession': {
-        result = await service.deleteSession(data.data);
-        break;
-      }
-      case 'deleteUser': {
-        result = await service.deleteUser(data.data);
-        break;
-      }
-      case 'getAccount': {
-        result = await service.getAccount(data.data.providerAccountId, data.data.provider);
-        break;
-      }
-      case 'getAuthenticator': {
-        result = await service.getAuthenticator(data.data);
-        break;
-      }
-      case 'getSessionAndUser': {
-        result = await service.getSessionAndUser(data.data);
-        break;
-      }
-      case 'getUser': {
-        result = await service.getUser(data.data);
-        break;
-      }
-      case 'getUserByAccount': {
-        result = await service.getUserByAccount(data.data);
-        break;
-      }
-      case 'getUserByEmail': {
-        result = await service.getUserByEmail(data.data);
-        break;
-      }
-      case 'linkAccount': {
-        result = await service.linkAccount(data.data);
-        break;
-      }
-      case 'listAuthenticatorsByUserId': {
-        result = await service.listAuthenticatorsByUserId(data.data);
-        break;
-      }
-      case 'unlinkAccount': {
-        result = await service.unlinkAccount(data.data);
-        break;
-      }
-      case 'updateAuthenticatorCounter': {
-        result = await service.updateAuthenticatorCounter(
-          data.data.credentialID,
-          data.data.counter,
-        );
-        break;
-      }
-      case 'updateSession': {
-        result = await service.updateSession(data.data);
-        break;
-      }
-      case 'updateUser': {
-        result = await service.updateUser(data.data);
-        break;
-      }
-      case 'useVerificationToken': {
-        result = await service.useVerificationToken(data.data);
-        break;
-      }
-      default: {
-        return NextResponse.json({ error: 'Invalid action', success: false }, { status: 400 });
-      }
-    }
-    return NextResponse.json({ data: result, success: true });
-  } catch (error) {
-    log('Error processing request:');
-    log(error);
-    return NextResponse.json({ error, success: false }, { status: 400 });
-  }
-}
-
-export const runtime = 'nodejs';

package/src/app/[variants]/(auth)/next-auth/error/AuthErrorPage.tsx

@@ -1,40 +0,0 @@
-'use client';
-
-import { signIn } from 'next-auth/react';
-import { useSearchParams } from '@/libs/next/navigation';
-import { memo } from 'react';
-
-import ErrorCapture from '@/components/Error';
-
-enum ErrorEnum {
-  AccessDenied = 'AccessDenied',
-  Configuration = 'Configuration',
-  Default = 'Default',
-  Verification = 'Verification',
-}
-
-const errorMap = {
-  [ErrorEnum.Configuration]:
-    'Wrong configuration, make sure you have the correct environment variables set. Visit https://lobehub.com/docs/self-hosting/advanced/authentication for more details.',
-  [ErrorEnum.AccessDenied]:
-    'Access was denied. Visit https://authjs.dev/reference/core/errors#accessdenied for more details. ',
-  [ErrorEnum.Verification]:
-    'Verification error, visit https://authjs.dev/reference/core/errors#verification for more details.',
-  [ErrorEnum.Default]:
-    'There was a problem when trying to authenticate. Visit https://authjs.dev/reference/core/errors for more details.',
-};
-
-export default memo(() => {
-  const search = useSearchParams();
-  const error = search.get('error') as ErrorEnum;
-  const props = {
-    error: {
-      cause: error,
-      message: errorMap[error] || 'Unknown error type.',
-      name: 'NextAuth Error',
-    },
-    reset: () => signIn(undefined, { callbackUrl: '/' }),
-  };
-  console.log('[NextAuth] Error:', props.error);
-  return <ErrorCapture {...props} />;
-});

package/src/app/[variants]/(auth)/next-auth/error/page.tsx

@@ -1,11 +0,0 @@
-import { Suspense } from 'react';
-
-import Loading from '@/components/Loading/BrandTextLoading';
-
-import AuthErrorPage from './AuthErrorPage';
-
-export default () => (
-  <Suspense fallback={<Loading debugId="Auth > Error" />}>
-    <AuthErrorPage />
-  </Suspense>
-);

package/src/app/[variants]/(auth)/next-auth/signin/AuthSignInBox.tsx

@@ -1,167 +0,0 @@
-'use client';
-
-import { BRANDING_NAME } from '@lobechat/business-const';
-import { DOCUMENTS_REFER_URL, PRIVACY_URL, TERMS_URL } from '@lobechat/const';
-import { Button, Skeleton, Text } from '@lobehub/ui';
-import { LobeHub } from '@lobehub/ui/brand';
-import { Col, Flex, Row } from 'antd';
-import { createStaticStyles } from 'antd-style';
-import { AuthError } from 'next-auth';
-import { signIn } from 'next-auth/react';
-import { useRouter, useSearchParams } from '@/libs/next/navigation';
-import { memo, useState } from 'react';
-import { useTranslation } from 'react-i18next';
-
-import BrandWatermark from '@/components/BrandWatermark';
-import AuthIcons from '@/components/NextAuth/AuthIcons';
-import { useUserStore } from '@/store/user';
-
-const styles = createStaticStyles(({ css, cssVar }) => ({
-  button: css`
-    text-transform: capitalize;
-  `,
-  container: css`
-    min-width: 360px;
-    border: 1px solid ${cssVar.colorBorder};
-    border-radius: ${cssVar.borderRadiusLG}px;
-    background: ${cssVar.colorBgContainer};
-  `,
-  contentCard: css`
-    padding-block: 2.5rem;
-    padding-inline: 2rem;
-  `,
-  description: css`
-    margin: 0;
-    color: ${cssVar.colorTextSecondary};
-  `,
-  footer: css`
-    padding: 1rem;
-    border-block-start: 1px solid ${cssVar.colorBorder};
-    border-radius: 0 0 8px 8px;
-
-    color: ${cssVar.colorTextDescription};
-
-    background: ${cssVar.colorBgElevated};
-  `,
-  text: css`
-    text-align: center;
-  `,
-  title: css`
-    margin: 0;
-    color: ${cssVar.colorTextHeading};
-  `,
-}));
-
-const BtnListLoading = memo(() => {
-  return (
-    <Flex gap={'small'} vertical>
-      <Skeleton.Button active style={{ minWidth: 300 }} />
-      <Skeleton.Button active style={{ minWidth: 300 }} />
-      <Skeleton.Button active style={{ minWidth: 300 }} />
-    </Flex>
-  );
-});
-
-/**
- * Follow the implementation from AuthJS official documentation,
- * but using client components.
- * ref: https://authjs.dev/guides/pages/signin
- */
-export default memo(() => {
-  const { t } = useTranslation('auth');
-  const { t: tCommon } = useTranslation('common');
-  const router = useRouter();
-  const [loadingProvider, setLoadingProvider] = useState<string | null>(null);
-
-  const oAuthSSOProviders = useUserStore((s) => s.oAuthSSOProviders);
-
-  const searchParams = useSearchParams();
-
-  // Redirect back to the page url, fallback to '/' if failed
-  const callbackUrl = searchParams.get('callbackUrl') ?? '/';
-
-  const handleSignIn = async (provider: string) => {
-    setLoadingProvider(provider);
-    try {
-      await signIn(provider, { redirectTo: callbackUrl });
-    } catch (error) {
-      setLoadingProvider(null);
-      // Signin can fail for a number of reasons, such as the user
-      // not existing, or the user not having the correct role.
-      // In some cases, you may want to redirect to a custom error
-      if (error instanceof AuthError) {
-        return router.push(`/next-auth/?error=${error.type}`);
-      }
-
-      // Otherwise if a redirects happens Next.js can handle it
-      // so you can just re-thrown the error and let Next.js handle it.
-      // Docs: https://nextjs.org/docs/app/api-reference/functions/redirect#server-component
-      throw error;
-    }
-  };
-
-  const footerBtns = [
-    { href: DOCUMENTS_REFER_URL, id: 0, label: tCommon('document') },
-    { href: PRIVACY_URL, id: 1, label: t('footer.privacy') },
-    { href: TERMS_URL, id: 2, label: t('footer.terms') },
-  ];
-
-  return (
-    <div className={styles.container}>
-      <div className={styles.contentCard}>
-        {/* Card Body */}
-        <Flex gap="large" vertical>
-          {/* Header */}
-          <div className={styles.text}>
-            <Text as={'h4'} className={styles.title}>
-              <div>
-                <LobeHub size={48} />
-              </div>
-              {t('signin.title')}
-            </Text>
-            <Text as={'p'} className={styles.description}>
-              {t('signin.subtitle', { appName: BRANDING_NAME })}
-            </Text>
-          </div>
-          {/* Content */}
-          <Flex gap="small" vertical>
-            {oAuthSSOProviders ? (
-              oAuthSSOProviders.map((provider) => (
-                <Button
-                  className={styles.button}
-                  icon={AuthIcons(provider, 16)}
-                  key={provider}
-                  loading={loadingProvider === provider}
-                  onClick={() => handleSignIn(provider)}
-                >
-                  {provider}
-                </Button>
-              ))
-            ) : (
-              <BtnListLoading />
-            )}
-          </Flex>
-        </Flex>
-      </div>
-      <div className={styles.footer}>
-        {/* Footer */}
-        <Row>
-          <Col span={12}>
-            <Flex justify="left" style={{ height: '100%' }}>
-              <BrandWatermark />
-            </Flex>
-          </Col>
-          <Col offset={4} span={8}>
-            <Flex justify="right">
-              {footerBtns.map((btn) => (
-                <Button key={btn.id} onClick={() => router.push(btn.href)} size="small" type="text">
-                  {btn.label}
-                </Button>
-              ))}
-            </Flex>
-          </Col>
-        </Row>
-      </div>
-    </div>
-  );
-});

package/src/app/[variants]/(auth)/next-auth/signin/page.tsx

@@ -1,11 +0,0 @@
-import { Suspense } from 'react';
-
-import Loading from '@/components/Loading/BrandTextLoading';
-
-import AuthSignInBox from './AuthSignInBox';
-
-export default () => (
-  <Suspense fallback={<Loading debugId="Auth > SignIn" />}>
-    <AuthSignInBox />
-  </Suspense>
-);

package/src/app/[variants]/(auth)/reset-password/layout.tsx

@@ -1,12 +0,0 @@
-import { notFound } from '@/libs/next/navigation';
-import { type PropsWithChildren } from 'react';
-
-import { enableBetterAuth } from '@/envs/auth';
-
-const Layout = ({ children }: PropsWithChildren) => {
-  if (!enableBetterAuth) return notFound();
-
-  return children;
-};
-
-export default Layout;

package/src/app/[variants]/(auth)/signin/layout.tsx

@@ -1,12 +0,0 @@
-import { notFound } from '@/libs/next/navigation';
-import { type PropsWithChildren } from 'react';
-
-import { enableBetterAuth } from '@/envs/auth';
-
-const Layout = ({ children }: PropsWithChildren) => {
-  if (!enableBetterAuth) return notFound();
-
-  return children;
-};
-
-export default Layout;

package/src/app/[variants]/(auth)/verify-email/layout.tsx

@@ -1,12 +0,0 @@
-import { notFound } from '@/libs/next/navigation';
-import { type PropsWithChildren } from 'react';
-
-import { enableBetterAuth } from '@/envs/auth';
-
-const Layout = ({ children }: PropsWithChildren) => {
-  if (!enableBetterAuth) return notFound();
-
-  return children;
-};
-
-export default Layout;

package/src/envs/auth.test.ts

@@ -1,47 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it } from 'vitest';
-
-import { getAuthConfig } from './auth';
-
-const ORIGINAL_ENV = { ...process.env };
-const ORIGINAL_WINDOW = globalThis.window;
-
-describe('getAuthConfig fallbacks', () => {
-  beforeEach(() => {
-    // reset env to a clean clone before each test
-    process.env = { ...ORIGINAL_ENV };
-    globalThis.window = ORIGINAL_WINDOW;
-  });
-
-  afterEach(() => {
-    process.env = { ...ORIGINAL_ENV };
-    globalThis.window = ORIGINAL_WINDOW;
-  });
-
-  it('should fall back to NEXT_AUTH_SSO_PROVIDERS when AUTH_SSO_PROVIDERS is empty string', () => {
-    process.env.AUTH_SSO_PROVIDERS = '';
-    process.env.NEXT_AUTH_SSO_PROVIDERS = 'logto,github';
-
-    // Simulate server runtime so @t3-oss/env treats this as server-side access
-    // (happy-dom sets window by default in Vitest)
-    // eslint-disable-next-line @typescript-eslint/ban-ts-comment
-    // @ts-expect-error - allow overriding for test
-    globalThis.window = undefined;
-
-    const config = getAuthConfig();
-
-    expect(config.AUTH_SSO_PROVIDERS).toBe('logto,github');
-  });
-
-  it('should fall back to NEXT_AUTH_SECRET when AUTH_SECRET is empty string', () => {
-    process.env.AUTH_SECRET = '';
-    process.env.NEXT_AUTH_SECRET = 'nextauth-secret';
-
-    // eslint-disable-next-line @typescript-eslint/ban-ts-comment
-    // @ts-expect-error - allow overriding for test
-    globalThis.window = undefined;
-
-    const config = getAuthConfig();
-
-    expect(config.AUTH_SECRET).toBe('nextauth-secret');
-  });
-});

package/src/layout/AuthProvider/NextAuth/UserUpdater.tsx

@@ -1,44 +0,0 @@
-'use client';
-
-import { useSession } from 'next-auth/react';
-import { memo, useEffect } from 'react';
-import { createStoreUpdater } from 'zustand-utils';
-
-import { useUserStore } from '@/store/user';
-import { type LobeUser } from '@/types/user';
-
-// update the user data into the context
-const UserUpdater = memo(() => {
-  const { data: session, status } = useSession();
-  const isLoaded = status !== 'loading';
-
-  const isSignedIn = (status === 'authenticated' && session && !!session.user) || false;
-
-  const nextUser = session?.user;
-  const useStoreUpdater = createStoreUpdater(useUserStore);
-
-  useStoreUpdater('isLoaded', isLoaded);
-  useStoreUpdater('isSignedIn', isSignedIn);
-  useStoreUpdater('nextSession', session!);
-
-  // 使用 useEffect 处理需要保持同步的用户数据
-  useEffect(() => {
-    if (nextUser) {
-      const userAvatar = useUserStore.getState().user?.avatar;
-
-      const lobeUser = {
-        // 头像使用设置的，而不是从 next-auth 中获取
-        avatar: userAvatar || '',
-        email: nextUser.email,
-        fullName: nextUser.name,
-        id: nextUser.id,
-      } as LobeUser;
-
-      // 更新用户相关数据
-      useUserStore.setState({ nextUser: nextUser, user: lobeUser });
-    }
-  }, [nextUser]);
-  return null;
-});
-
-export default UserUpdater;

package/src/layout/AuthProvider/NextAuth/index.tsx

@@ -1,17 +0,0 @@
-import { SessionProvider } from 'next-auth/react';
-import { type PropsWithChildren } from 'react';
-
-import { API_ENDPOINTS } from '@/services/_url';
-
-import UserUpdater from './UserUpdater';
-
-const NextAuth = ({ children }: PropsWithChildren) => {
-  return (
-    <SessionProvider basePath={API_ENDPOINTS.oauth}>
-      {children}
-      <UserUpdater />
-    </SessionProvider>
-  );
-};
-
-export default NextAuth;