link-stack/apps/link/app/api/auth/[...nextauth]/route.ts

import NextAuth from "next-auth";
import Google from "next-auth/providers/google";
import Credentials from "next-auth/providers/credentials";
import Apple from "next-auth/providers/apple";

const headers = { Authorization: `Token ${process.env.ZAMMAD_API_TOKEN}` };

const fetchRoles = async () => {
  const url = `${process.env.ZAMMAD_URL}/api/v1/roles`;
  const res = await fetch(url, { headers });
  const roles = await res.json();
  const formattedRoles = roles.reduce((acc: any, role: any) => {
    acc[role.id] = role.name;
    return acc;
  }, {});
  return formattedRoles;
};

const fetchUser = async (email: string) => {
  const url = `${process.env.ZAMMAD_URL}/api/v1/users/search?query=email:${email}&limit=1`;
  console.log({ url });
  const res = await fetch(url, { headers });
  const users = await res.json();
  const user = users?.[0];
  return user;
};

const getUserRoles = async (email: string) => {
  try {
    const user = await fetchUser(email);
    const allRoles = await fetchRoles();
    const roles = user.role_ids.map((roleID: number) => {
      const role = allRoles[roleID];
      return role ? role.toLowerCase().replace(" ", "_") : null;
    });
    return roles.filter((role: string) => role !== null);
  } catch (e) {
    console.log({ e });
    return [];
  }
};

const login = async (email: string, password: string) => {
  const url = `${process.env.ZAMMAD_URL}/api/v1/users/me`;
  console.log({ url });
  const authorization = 'Basic ' + Buffer.from(email + ":" + password).toString('base64');
  const res = await fetch(url, {
    headers: {
      authorization
    }
  });
  const user = await res.json();
  console.log({ user });

  if (user && !user.error && user.id) {
    return user;
  } else {
    return null;
  }
};

const handler = NextAuth({
  pages: {
    signIn: "/login",
    error: "/login",
    signOut: "/logout",
  },
  providers: [
    Google({
      clientId: process.env.GOOGLE_CLIENT_ID,
      clientSecret: process.env.GOOGLE_CLIENT_SECRET,
    }),
    Apple({
      clientId: process.env.APPLE_CLIENT_ID,
      clientSecret: process.env.APPLE_CLIENT_SECRET
    }),
    Credentials({
      name: "Zammad",
      credentials: {
        email: { label: "Email", type: "text", },
        password: { label: "Password", type: "password" }
      },
      async authorize(credentials, req) {
        const user = await login(credentials.email, credentials.password);
        if (user) {
          return user;
        } else {
          return null;
        }
      }
    })
  ],
  secret: process.env.NEXTAUTH_SECRET,

  callbacks: {
    signIn: async ({ user, account, profile }) => {
      console.log("SIGN IN");
      const roles = await getUserRoles(user.email) ?? [];
      return roles.includes("admin") || roles.includes("agent") || process.env.SETUP_MODE === "true";
    },
    session: async ({ session, user, token }) => {
      // @ts-ignore
      session.user.roles = token.roles ?? [];
      // @ts-ignore
      session.user.leafcutter = token.leafcutter; // remove
      return session;
    },
    jwt: async ({ token, user, account, profile, trigger }) => {
      if (user) {
        token.roles = await getUserRoles(user.email) ?? [];
      }
      return token;
    }
  },

});


export { handler as GET, handler as POST };