Objective

To learn how to use NextAuthJS by adding more sign-in options. This Issue will serve as my notebook as I try to grok this.

Suggestions

I believe there are three things I should learn here:

• Adding sign-in options from other auth providers.
• Adding custom sign-in option.
• Configuring roles.
• Securing routes.

Q&A

Updating this section as I learn.

1. How to implement role-based authorization?

• Refer to recap below: #1 (comment)

2. Can Prisma handle user-role logic?

• Prisma does not handle user-role logic per se, but you use Prisma to define a role field in the Users model.
• You then query the database via Prisma to get the role of the current user.
• After storing this value in the session object from NextAuth.js, where you can decide if a user has the right role for any request.
• You also use Prisma for code that elevates/changes a user's role, but optimally, a superuser needs to be defined through direct database access.

3. How to override the default auth page from NextAuth.js?

• This can be customized by creating a signin.tsx page and registering it in [...nextauth.js] config with the pages key as below:

export const authOptions: NextAuthOptions = {
  // Include user.id on session
  callbacks: {
    session({ session, user }) {
      if (session.user) {
        session.user.id = user.id;
      }
      return session;
    },
  },
  // Configure one or more authentication providers
  adapter: PrismaAdapter(prisma),
  providers: [
    DiscordProvider({
      clientId: env.DISCORD_CLIENT_ID,
      clientSecret: env.DISCORD_CLIENT_SECRET,
    }),
    // ...add more providers here
    GithubProvider({
      clientId: env.GITHUB_CLIENT_ID,
      clientSecret: env.GITHUB_CLIENT_SECRET,
    }),
  ],
  pages: {
    signIn: "/signin",  // Add custom sign in page location here
  }
};

export default NextAuth(authOptions);

Objective

To learn tRPC routing by tweaking endpoints.

Suggestion

• UPDATE: Migrate to version 7.3.0
• Start by passing posts data in the Admin page through a secured API call.