gunbuilder-next-tailwind/src/app/api/auth/[...nextauth]/route.ts

import NextAuth from 'next-auth';
import GoogleProvider from 'next-auth/providers/google';
import CredentialsProvider from 'next-auth/providers/credentials';
import { DrizzleAdapter } from '@auth/drizzle-adapter';
import { db } from '@/db';
import { users } from '@/db/schema';
import bcrypt from 'bcryptjs';

const handler = NextAuth({
  adapter: DrizzleAdapter(db),
  session: { strategy: 'jwt' },
  providers: [
    GoogleProvider({
      clientId: process.env.GOOGLE_CLIENT_ID ?? '',
      clientSecret: process.env.GOOGLE_CLIENT_SECRET ?? '',
    }),
    CredentialsProvider({
      name: 'Credentials',
      credentials: {
        email: { label: "Email", type: "email" },
        password: { label: "Password", type: "password" }
      },
      async authorize(credentials) {
        console.log('Credentials received:', credentials);
        if (!credentials?.email || !credentials?.password) return null;
        // Query the real users table using Drizzle
        const foundUser = await db.query.users.findFirst({
          where: (u, { eq }) => eq(u.email, credentials.email),
        });
        console.log('User found:', foundUser);
        if (foundUser && foundUser.hashedPassword && await bcrypt.compare(credentials.password, foundUser.hashedPassword)) {
          console.log('Returning user:', foundUser);
          return foundUser;
        }
        return null;
      }
    }),
  ],
  pages: {
    signIn: '/account/login',
    // signUp: '/account/register', // Uncomment when register page is ready
    // error: '/account/error', // Uncomment when error page is ready
  },
  callbacks: {
    async session({ session, user, token }) {
      console.log('Session callback - user:', user);
      console.log('Session callback - token:', token);
      if (session.user) {
        (session.user as any).isAdmin = (user as any)?.isAdmin ?? token?.isAdmin ?? false;
        console.log('Session callback - final isAdmin:', (session.user as any).isAdmin);
      }
      return session;
    },
    async jwt({ token, user }) {
      console.log('JWT callback - user:', user);
      console.log('JWT callback - token before:', token);
      if (user && typeof user === 'object' && 'isAdmin' in user) {
        (token as any).isAdmin = (user as any).isAdmin;
        console.log('JWT callback - setting isAdmin to:', (user as any).isAdmin);
      }
      console.log('JWT callback - token after:', token);
      return token;
    }
  },
})

export { handler as GET, handler as POST }