auth.config.ts

import bcryptjs from "bcryptjs";
import type { NextAuthConfig } from "next-auth";
import Credentials from "next-auth/providers/credentials";
import Github from "next-auth/providers/github";
import Google from "next-auth/providers/google";
import { InvalidCredentials, UserNotFound } from "./lib/auth";
import { CredentialsSchema } from "./schemas/auth";
import { findUserByEmail } from "./services";

export default {
	providers: [
		Credentials({
			async authorize(credentials) {
				const validatedCredentials = CredentialsSchema.safeParse(credentials);
				if (validatedCredentials.success) {
					const { email, password } = validatedCredentials.data;
					const user = await findUserByEmail(email);
					if (!user || !user.password) {
						throw new UserNotFound();
					}
					const validPassword = await bcryptjs.compare(password, user.password);
					if (validPassword) return user;
				}
				//TODO: Would it be better to throw new InvalidCredential?
				return null;
			},
		}),
		Google,
		Github,
	],
} satisfies NextAuthConfig;