86 lines
2.7 KiB
TypeScript
86 lines
2.7 KiB
TypeScript
import { NextAuthOptions } from 'next-auth'
|
|
import CredentialsProvider from 'next-auth/providers/credentials'
|
|
import { prisma } from '@/lib/prisma'
|
|
import bcrypt from 'bcryptjs'
|
|
|
|
export const authOptions: NextAuthOptions = {
|
|
providers: [
|
|
CredentialsProvider({
|
|
name: 'Credentials',
|
|
credentials: {
|
|
email: { label: 'Email', type: 'email' },
|
|
password: { label: 'Password', type: 'password' },
|
|
},
|
|
async authorize(credentials) {
|
|
if (!credentials?.email || !credentials?.password) {
|
|
throw new Error('请输入邮箱和密码')
|
|
}
|
|
|
|
const user = await prisma.user.findUnique({
|
|
where: { email: credentials.email },
|
|
})
|
|
|
|
if (!user) {
|
|
throw new Error('用户不存在')
|
|
}
|
|
|
|
const isPasswordValid = await bcrypt.compare(
|
|
credentials.password,
|
|
user.password
|
|
)
|
|
|
|
if (!isPasswordValid) {
|
|
throw new Error('密码错误')
|
|
}
|
|
|
|
// 检查用户是否已激活（管理员除外）
|
|
if (!user.isActive && user.role !== 'ADMIN') {
|
|
throw new Error('账号未激活，请联系管理员')
|
|
}
|
|
|
|
return {
|
|
id: user.id,
|
|
email: user.email,
|
|
name: user.username,
|
|
role: user.role,
|
|
department: user.department,
|
|
managedDepartment: user.managedDepartment,
|
|
avatar: user.avatar, // 添加头像字段
|
|
isSuperAdmin: (user as any).isSuperAdmin ?? false, // 添加超级管理员标识
|
|
}
|
|
},
|
|
}),
|
|
],
|
|
callbacks: {
|
|
async jwt({ token, user }) {
|
|
if (user) {
|
|
token.role = (user as any).role;
|
|
token.id = user.id;
|
|
token.avatar = (user as any).avatar; // 添加头像到token
|
|
token.isSuperAdmin = (user as any).isSuperAdmin; // 添加超级管理员标识到token
|
|
token.department = (user as any).department || '';
|
|
token.managedDepartment = (user as any).managedDepartment || null;
|
|
}
|
|
return token;
|
|
},
|
|
async session({ session, token }) {
|
|
if (session?.user && token) {
|
|
(session.user as any).role = token.role || 'USER';
|
|
(session.user as any).id = token.id;
|
|
(session.user as any).avatar = token.avatar; // 添加头像到session
|
|
(session.user as any).isSuperAdmin = token.isSuperAdmin || false; // 添加超级管理员标识到session
|
|
(session.user as any).department = (token as any).department || '';
|
|
(session.user as any).managedDepartment = (token as any).managedDepartment || null;
|
|
}
|
|
return session;
|
|
},
|
|
},
|
|
pages: {
|
|
signIn: '/login',
|
|
},
|
|
session: {
|
|
strategy: 'jwt',
|
|
},
|
|
secret: process.env.NEXTAUTH_SECRET,
|
|
}
|