70 lines
1.7 KiB
TypeScript
70 lines
1.7 KiB
TypeScript
import {
|
|
betterAuth,
|
|
type AuthContext,
|
|
type BetterAuthOptions,
|
|
type MiddlewareContext,
|
|
type MiddlewareOptions,
|
|
} from "better-auth";
|
|
import { drizzleAdapter } from "better-auth/adapters/drizzle";
|
|
import { createAuthMiddleware, username } from "better-auth/plugins";
|
|
import { convertLegacyUserOnFirstLogin } from "./auth-middlewares/convert-legacy-user";
|
|
import { cryptoUtils } from "~/server/utils/crypto";
|
|
import { db } from "~/server/db/db";
|
|
import { ensureOnlyOneUser } from "./auth-middlewares/only-one-user";
|
|
|
|
export type AuthMiddlewareContext = MiddlewareContext<MiddlewareOptions, AuthContext<BetterAuthOptions>>;
|
|
|
|
let _auth: ReturnType<typeof betterAuth> | null = null;
|
|
|
|
const createAuth = async () => {
|
|
if (_auth) return _auth;
|
|
|
|
_auth = betterAuth({
|
|
secret: await cryptoUtils.deriveSecret("better-auth"),
|
|
hooks: {
|
|
before: createAuthMiddleware(async (ctx) => {
|
|
await ensureOnlyOneUser(ctx);
|
|
await convertLegacyUserOnFirstLogin(ctx);
|
|
}),
|
|
},
|
|
database: drizzleAdapter(db, {
|
|
provider: "sqlite",
|
|
}),
|
|
emailAndPassword: {
|
|
enabled: true,
|
|
},
|
|
user: {
|
|
modelName: "usersTable",
|
|
additionalFields: {
|
|
username: {
|
|
type: "string",
|
|
returned: true,
|
|
required: true,
|
|
},
|
|
hasDownloadedResticPassword: {
|
|
type: "boolean",
|
|
returned: true,
|
|
},
|
|
},
|
|
},
|
|
session: {
|
|
modelName: "sessionsTable",
|
|
},
|
|
plugins: [username({})],
|
|
});
|
|
|
|
return _auth;
|
|
};
|
|
|
|
export const auth = {
|
|
get api() {
|
|
if (!_auth) throw new Error("Auth not initialized. Call initAuth() first.");
|
|
return _auth.api;
|
|
},
|
|
get handler() {
|
|
if (!_auth) throw new Error("Auth not initialized. Call initAuth() first.");
|
|
return _auth.handler;
|
|
},
|
|
};
|
|
|
|
export const initAuth = createAuth;
|