79 lines
2.2 KiB
TypeScript
79 lines
2.2 KiB
TypeScript
import { NextAuthOptions } from 'next-auth'
|
|
import CredentialsProvider from 'next-auth/providers/credentials'
|
|
import { prisma } from '@/lib/prisma'
|
|
import bcrypt from 'bcryptjs'
|
|
|
|
export const authOptions: NextAuthOptions = {
|
|
providers: [
|
|
CredentialsProvider({
|
|
name: 'Credentials',
|
|
credentials: {
|
|
email: { label: 'Email', type: 'email' },
|
|
password: { label: 'Password', type: 'password' },
|
|
},
|
|
async authorize(credentials) {
|
|
if (!credentials?.email || !credentials?.password) {
|
|
throw new Error('请输入邮箱和密码')
|
|
}
|
|
|
|
const user = await prisma.user.findUnique({
|
|
where: { email: credentials.email },
|
|
})
|
|
|
|
if (!user) {
|
|
throw new Error('用户不存在')
|
|
}
|
|
|
|
const isPasswordValid = await bcrypt.compare(
|
|
credentials.password,
|
|
user.password
|
|
)
|
|
|
|
if (!isPasswordValid) {
|
|
throw new Error('密码错误')
|
|
}
|
|
|
|
// 检查用户是否已激活（如果启用了激活功能且用户不是管理员或超级管理员）
|
|
const settings = await prisma.systemSettings.findFirst()
|
|
if (settings?.enableUserActivation && !user.isActive && user.role !== 'ADMIN' && !(user as any).isSuperAdmin) {
|
|
throw new Error('账号未激活，请联系管理员')
|
|
}
|
|
|
|
return {
|
|
id: user.id,
|
|
email: user.email,
|
|
name: user.username,
|
|
role: user.role as "ADMIN" | "USER",
|
|
isSuperAdmin: (user as any).isSuperAdmin,
|
|
}
|
|
},
|
|
}),
|
|
],
|
|
callbacks: {
|
|
async jwt({ token, user }) {
|
|
if (user) {
|
|
token.role = (user as any).role;
|
|
token.id = user.id;
|
|
(token as any).isSuperAdmin = (user as any).isSuperAdmin || false;
|
|
}
|
|
return token;
|
|
},
|
|
async session({ session, token }) {
|
|
if (session?.user && token) {
|
|
(session.user as any).role = token.role || 'USER';
|
|
(session.user as any).id = token.id;
|
|
(session.user as any).isSuperAdmin = (token as any).isSuperAdmin || false;
|
|
}
|
|
return session;
|
|
},
|
|
},
|
|
pages: {
|
|
signIn: '/login',
|
|
signOut: '/login',
|
|
},
|
|
session: {
|
|
strategy: 'jwt',
|
|
},
|
|
secret: process.env.NEXTAUTH_SECRET,
|
|
}
|