60 lines
1.7 KiB
TypeScript
Executable File
60 lines
1.7 KiB
TypeScript
Executable File
import { env } from "node:process";
|
|
import { betterAuth } from "better-auth";
|
|
import { drizzleAdapter } from "better-auth/adapters/drizzle";
|
|
import { admin } from "better-auth/plugins";
|
|
import { headers } from "next/headers";
|
|
import { uuidv7 } from "uuidv7";
|
|
import { db } from "$/db"; // your drizzle instance
|
|
import * as schema from "$/db/schema";
|
|
import { checkAdmin } from "./auth-check";
|
|
import { redis } from "./db/redis";
|
|
|
|
export const auth = betterAuth({
|
|
emailAndPassword: {
|
|
enabled: true,
|
|
},
|
|
plugins: [admin()],
|
|
trustedOrigins: [
|
|
"http://nyx:3000",
|
|
"http://astral:3000",
|
|
"http://localhost:3000",
|
|
"https://dev3000.astrxl.dev",
|
|
"http://m.dgnr.us",
|
|
"http://buzz.sudloh.com",
|
|
"http://app.buzz.svc.cluster.local:3000",
|
|
],
|
|
database: drizzleAdapter(db, {
|
|
provider: "pg", // or "mysql", "sqlite"
|
|
schema,
|
|
}),
|
|
});
|
|
|
|
export async function adminCheck() {
|
|
"use server";
|
|
|
|
let requestHeaders: Awaited<ReturnType<typeof headers>> | undefined;
|
|
const getHeaders = async () => (requestHeaders ??= await headers());
|
|
|
|
return checkAdmin({
|
|
noAuthCheck: env.NO_AUTH_CHECK,
|
|
bypassUser: {
|
|
email: "bypass@localhost",
|
|
name: "[email protected]",
|
|
},
|
|
internalUser: {
|
|
email: "internal@localhost",
|
|
name: "[email protected]",
|
|
},
|
|
getInternalAuth: async () => (await getHeaders()).get("X-Internal-Auth"),
|
|
getInternalToken: (token) => redis!.get(`internalToken:${token}`),
|
|
getSession: async () =>
|
|
auth.api.getSession({ headers: await getHeaders() }),
|
|
});
|
|
}
|
|
|
|
export async function issueInternalToken() {
|
|
const token = uuidv7();
|
|
await redis!.setex(`internalToken:${token}`, 600, "valid");
|
|
return token;
|
|
}
|