lucianoandClaude Opus 4.7
5f17f95d6d
- authPlugin runs preHandler that turns Fastify request headers into a Headers object, calls auth.api.getSession, and decorates request.user / request.session - requireAuth() preHandler short-circuits with 401 when not signed in - New module modules/me with GET /me returning the authenticated user/session - env validates BETTER_AUTH_SECRET (≥32) and BETTER_AUTH_URL — must match web - Restored .js extensions in shared packages so NodeNext-resolution consumers (api) typecheck cleanly; Next webpack now uses extensionAlias to map .js → .ts - Re-enabled NodeNext for packages/auth and packages/db tsconfigs Verified end-to-end: - POST /api/auth/sign-in/email on web returns session cookie - GET /me on api with the cookie returns 200 + user/session - GET /me without the cookie returns 401 Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
41 lines
1.1 KiB
TypeScript
41 lines
1.1 KiB
TypeScript
import { prisma } from '@ketopath/db';
|
|
import { betterAuth } from 'better-auth';
|
|
import { prismaAdapter } from 'better-auth/adapters/prisma';
|
|
|
|
import { readAuthEnv } from './env.js';
|
|
|
|
const env = readAuthEnv();
|
|
|
|
const googleProvider =
|
|
env.GOOGLE_CLIENT_ID && env.GOOGLE_CLIENT_SECRET
|
|
? {
|
|
google: {
|
|
clientId: env.GOOGLE_CLIENT_ID,
|
|
clientSecret: env.GOOGLE_CLIENT_SECRET,
|
|
},
|
|
}
|
|
: undefined;
|
|
|
|
export const auth = betterAuth({
|
|
database: prismaAdapter(prisma, { provider: 'postgresql' }),
|
|
secret: env.BETTER_AUTH_SECRET,
|
|
baseURL: env.BETTER_AUTH_URL,
|
|
emailAndPassword: {
|
|
enabled: true,
|
|
// MVP: nessuna verifica email per non bloccare l'onboarding (vedi
|
|
// docs/decisions/0001-auth-provider.md). Verrà attivata in V1.
|
|
requireEmailVerification: false,
|
|
minPasswordLength: 8,
|
|
},
|
|
socialProviders: googleProvider,
|
|
session: {
|
|
expiresIn: 60 * 60 * 24 * 7, // 7 giorni
|
|
updateAge: 60 * 60 * 24, // refresh expiresAt ogni 24h se la session è attiva
|
|
},
|
|
advanced: {
|
|
cookiePrefix: 'ketopath',
|
|
},
|
|
});
|
|
|
|
export type Auth = typeof auth;
|