mirror of
https://github.com/ChatGPTNextWeb/ChatGPT-Next-Web.git
synced 2025-10-01 23:56:39 +08:00
324 lines
12 KiB
TypeScript
324 lines
12 KiB
TypeScript
import {getServerSession, type NextAuthOptions, Theme} from "next-auth";
|
|
import GitHubProvider from "next-auth/providers/github";
|
|
import EmailProvider from "next-auth/providers/email";
|
|
import CredentialsProvider from "next-auth/providers/credentials";
|
|
import {PrismaAdapter} from "@next-auth/prisma-adapter";
|
|
import prisma from "@/lib/prisma";
|
|
import { User } from "@prisma/client";
|
|
import {ADMIN_LIST, isEmail, isName} from "@/lib/auth_list";
|
|
import {createTransport} from "nodemailer";
|
|
import { comparePassword, hashPassword } from "@/lib/utils";
|
|
const SECURE_COOKIES:boolean = !!process.env.SECURE_COOKIES;
|
|
|
|
|
|
export const authOptions: NextAuthOptions = {
|
|
// debug: true,
|
|
debug: !SECURE_COOKIES,
|
|
useSecureCookies: SECURE_COOKIES,
|
|
secret: process.env.NEXTAUTH_SECRET,
|
|
providers: [
|
|
GitHubProvider({
|
|
clientId: process.env.AUTH_GITHUB_ID as string,
|
|
clientSecret: process.env.AUTH_GITHUB_SECRET as string,
|
|
profile(profile) {
|
|
return {
|
|
id: profile.id.toString(),
|
|
name: profile.name || profile.login,
|
|
gh_username: profile.login,
|
|
email: profile.email,
|
|
image: profile.avatar_url,
|
|
};
|
|
},
|
|
}),
|
|
EmailProvider({
|
|
server: {
|
|
host: process.env.EMAIL_SERVER_HOST,
|
|
port: parseInt(process.env.EMAIL_SERVER_PORT ?? "0"),
|
|
auth: {
|
|
user: process.env.EMAIL_SERVER_USER,
|
|
pass: process.env.EMAIL_SERVER_PASSWORD,
|
|
},
|
|
},
|
|
from: process.env.EMAIL_FROM,
|
|
async sendVerificationRequest({
|
|
identifier: email,
|
|
url,
|
|
provider: { server, from, name },
|
|
theme,
|
|
}) {
|
|
/* your function */
|
|
console.log('send mail,', email, url, server, from, )
|
|
const { host } = new URL(url)
|
|
const transport = createTransport(server)
|
|
const result = await transport.sendMail({
|
|
to: email,
|
|
from: from,
|
|
subject: `Sign in to ${host}`,
|
|
html: email_html({ url, host, theme }),
|
|
})
|
|
const failed = result.rejected.concat(result.pending).filter(Boolean)
|
|
console.log('[result],', result)
|
|
if (failed.length) {
|
|
throw new Error(`Email(s) (${failed.join(", ")}) could not be sent`)
|
|
}
|
|
|
|
},
|
|
}),
|
|
CredentialsProvider({
|
|
// The name to display on the sign in form (e.g. "Sign in with...")
|
|
name: "Credentials",
|
|
// `credentials` is used to generate a form on the sign in page.
|
|
// You can specify which fields should be submitted, by adding keys to the `credentials` object.
|
|
// e.g. domain, username, password, 2FA token, etc.
|
|
// You can pass any HTML attribute to the <input> tag through the object.
|
|
credentials: {
|
|
username: { label: "Username", type: "text", placeholder: "输入姓名或邮箱" },
|
|
password: { label: "Password", type: "password", placeholder: "密码验证，测试阶段" }
|
|
},
|
|
// @ts-ignore
|
|
async authorize(credential, req) {
|
|
const username = cleanUpString(`${credential?.username}`);
|
|
const password = cleanPassword(`${credential?.password}`);
|
|
// 验证用户名
|
|
// console.log(credential, 'p', password, '==============3')
|
|
// 判断姓名格式是否符合要求，不符合则拒绝
|
|
if (username && isName(username)) {
|
|
// Any object returned will be saved in `user` property of the JWT
|
|
let user:{[key: string]: string} = {}
|
|
if (isEmail(username)) {
|
|
user['email'] = username;
|
|
} else {
|
|
user['name'] = username;
|
|
}
|
|
// 目前用户不存在，则会创建新用户。
|
|
let existingUser = await existUser(user); // await insertUser(user)
|
|
if (!existingUser) {
|
|
// 如果不存在，则报错
|
|
// throw new Error("用户查询失败")
|
|
// 如果不存在，则创建
|
|
existingUser = await insertUser(user);
|
|
}
|
|
// 有密码就校验密码，没有就直接返回用户
|
|
password && validatePassword(password, existingUser.password);
|
|
return existingUser;
|
|
} else {
|
|
// If you return null then an error will be displayed advising the user to check their details.
|
|
// return null
|
|
throw new Error("username,用户名校验失败")
|
|
// You can also Reject this callback with an Error thus the user will be sent to the error page with the error message as a query parameter
|
|
}
|
|
}
|
|
})
|
|
],
|
|
pages: {
|
|
signIn: `/login`,
|
|
// verifyRequest: `/login`,
|
|
error: "/login", // Error code passed in query string as ?error=
|
|
},
|
|
adapter: PrismaAdapter(prisma),
|
|
session: { strategy: "jwt", maxAge: 3 * 24 * 60 * 60 },
|
|
cookies: {
|
|
sessionToken: {
|
|
name: `${SECURE_COOKIES ? "__Secure-" : ""}next-auth.session-token`,
|
|
options: {
|
|
httpOnly: true,
|
|
sameSite: "lax",
|
|
path: "/",
|
|
// When working on localhost, the cookie domain must be omitted entirely (https://stackoverflow.com/a/1188145)
|
|
// domain: VERCEL_DEPLOYMENT
|
|
// ? `.${process.env.NEXT_PUBLIC_ROOT_DOMAIN}`
|
|
// : undefined,
|
|
secure: SECURE_COOKIES,
|
|
},
|
|
},
|
|
},
|
|
callbacks: {
|
|
jwt: async ({ token, user }) => {
|
|
// const current_time = Math.floor(Date.now() / 1000);
|
|
// console.log('=============', token, user,)
|
|
if (user) {
|
|
token.user = user;
|
|
}
|
|
return token;
|
|
},
|
|
session: async ({ session, token }) => {
|
|
session.user = {
|
|
...session.user,
|
|
// @ts-expect-error
|
|
id: token?.sub,
|
|
// @ts-expect-error
|
|
username: token?.user?.username || token?.user?.gh_username,
|
|
};
|
|
// console.log('555555555,', session, token)
|
|
return session;
|
|
},
|
|
// 过滤不存在的用户，目前没用
|
|
// async signIn({ user, account, profile, email, credentials }) {
|
|
// const existingUser = await existUser(user as User);
|
|
// console.log('---', user, 'account', account, 'email', email, 'exist', existingUser)
|
|
// return !!existingUser;
|
|
// }
|
|
},
|
|
};
|
|
|
|
export function getSession() {
|
|
// console.log('in........',)
|
|
return getServerSession(authOptions) as Promise<{
|
|
user: {
|
|
id: string;
|
|
name: string;
|
|
username: string;
|
|
email: string;
|
|
image: string;
|
|
};
|
|
} | null>;
|
|
}
|
|
|
|
export async function getSessionName() {
|
|
const session = await getSession();
|
|
// console.log('in........', session)
|
|
return {
|
|
name: session?.user?.email || session?.user?.name,
|
|
session
|
|
}
|
|
}
|
|
|
|
export async function VerifiedUser() {
|
|
const { name, session } = await getSessionName();
|
|
const userId = session?.user?.id
|
|
return !!(name && isName(name) && userId);
|
|
}
|
|
|
|
export async function VerifiedAdminUser() {
|
|
const { name, session } = await getSessionName();
|
|
return !!(name && ADMIN_LIST.includes(name));
|
|
}
|
|
|
|
export function validatePassword(password: string, hashPassword: string | null | undefined ): boolean | void {
|
|
if (!hashPassword) {
|
|
throw new Error("password,未设置密码");
|
|
}
|
|
|
|
if (!comparePassword(password, hashPassword)) {
|
|
throw new Error("password,用户名或密码不正确")
|
|
} else {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
async function existUser(user: {[key: string]: string} | User ) {
|
|
const conditions = [];
|
|
if (user?.name) {
|
|
conditions.push({ name: user.name });
|
|
}
|
|
if (user?.email) {
|
|
conditions.push({ email: user.email });
|
|
}
|
|
return conditions.length ? await prisma.user.findFirst({
|
|
where: {
|
|
AND: conditions,
|
|
},
|
|
}) : null
|
|
}
|
|
|
|
export async function insertUser(user: {[key: string]: string}) {
|
|
try {
|
|
return await prisma.user.create({
|
|
data: user
|
|
})
|
|
// const existingUser = await existUser(user);
|
|
// // console.log('[LOG]', existingUser, user, '=======')
|
|
// if (!existingUser) {
|
|
//
|
|
// } else {
|
|
// // console.log('user==========', existingUser)
|
|
// return existingUser;
|
|
// }
|
|
} catch (e) {
|
|
throw new Error("username,用户创建失败");
|
|
// return false;
|
|
}
|
|
}
|
|
|
|
|
|
function cleanUpString(input: string): string {
|
|
try {
|
|
// 去除前后空格
|
|
let cleanedString = input.trim();
|
|
// 去除非中文、英文、@和.字符
|
|
cleanedString = cleanedString.replace(/[^\u4e00-\u9fa5a-zA-Z@.]/g, '');
|
|
return cleanedString;
|
|
}
|
|
catch {
|
|
return '';
|
|
}
|
|
}
|
|
|
|
function cleanPassword(input: string): string {
|
|
try {
|
|
// 去除前后空格
|
|
return input.trim()
|
|
}
|
|
catch {
|
|
return '';
|
|
}
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
* Email HTML body
|
|
* Insert invisible space into domains from being turned into a hyperlink by email
|
|
* clients like Outlook and Apple mail, as this is confusing because it seems
|
|
* like they are supposed to click on it to sign in.
|
|
*
|
|
* @note We don't add the email address to avoid needing to escape it, if you do, remember to sanitize it!
|
|
*/
|
|
function email_html(params: { url: string, host: string, theme: Theme }) {
|
|
const { url, host, theme } = params
|
|
|
|
const escapedHost = host.replace(/\./g, "​.")
|
|
|
|
const brandColor = theme.brandColor || "#346df1"
|
|
const color = {
|
|
background: "#f9f9f9",
|
|
text: "#444",
|
|
mainBackground: "#fff",
|
|
buttonBackground: brandColor,
|
|
buttonBorder: brandColor,
|
|
buttonText: theme.buttonText || "#fff",
|
|
}
|
|
|
|
return `
|
|
<body style="background: ${color.background};">
|
|
<table width="100%" border="0" cellspacing="20" cellpadding="0"
|
|
style="background: ${color.mainBackground}; max-width: 600px; margin: auto; border-radius: 10px;">
|
|
<tr>
|
|
<td align="center"
|
|
style="padding: 10px 0px; font-size: 22px; font-family: Helvetica, Arial, sans-serif; color: ${color.text};">
|
|
Sign in to <strong>${escapedHost}</strong>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td align="center" style="padding: 20px 0;">
|
|
<table border="0" cellspacing="0" cellpadding="0">
|
|
<tr>
|
|
<td align="center" style="border-radius: 5px;" bgcolor="${color.buttonBackground}"><a href="${url}"
|
|
target="_blank"
|
|
style="font-size: 18px; font-family: Helvetica, Arial, sans-serif; color: ${color.buttonText}; text-decoration: none; border-radius: 5px; padding: 10px 20px; border: 1px solid ${color.buttonBorder}; display: inline-block; font-weight: bold;">Sign
|
|
in</a></td>
|
|
</tr>
|
|
</table>
|
|
</td>
|
|
</tr>
|
|
<tr>
|
|
<td align="center"
|
|
style="padding: 0px 0px 10px 0px; font-size: 16px; line-height: 22px; font-family: Helvetica, Arial, sans-serif; color: ${color.text};">
|
|
If you did not request this email you can safely ignore it.
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
</body>
|
|
`
|
|
}
|