69 lines
1.8 KiB
TypeScript
69 lines
1.8 KiB
TypeScript
|
import * as schema from '@db/schema';
|
||
|
|
import bcrypt from 'bcrypt';
|
||
|
|
|
||
|
|
import { db, eq } from '@db/drizzle';
|
||
|
|
import { type BetterAuthOptions } from 'better-auth';
|
||
|
|
import { sendEmail } from '@cio/email';
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Configuration for the email and password options
|
||
|
|
* @see https://www.better-auth.com/docs/authentication/email-password
|
||
|
|
*/
|
||
|
|
export const config: BetterAuthOptions['emailAndPassword'] = {
|
||
|
|
enabled: true,
|
||
|
|
password: {
|
||
|
|
hash: async (password) => {
|
||
|
|
return await bcrypt.hash(password, 10);
|
||
|
|
},
|
||
|
|
verify: async ({ hash, password }) => {
|
||
|
|
return await bcrypt.compare(password, hash);
|
||
|
|
}
|
||
|
|
},
|
||
|
|
sendResetPassword: sendResetPassword,
|
||
|
|
onPasswordReset: onPasswordReset
|
||
|
|
};
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Types for the email and password options
|
||
|
|
*/
|
||
|
|
type ResetPasswordOptions = Parameters<
|
||
|
|
NonNullable<NonNullable<BetterAuthOptions['emailAndPassword']>['sendResetPassword']>
|
||
|
|
>[0];
|
||
|
|
type OnPasswordResetEmail = Parameters<
|
||
|
|
NonNullable<NonNullable<BetterAuthOptions['emailAndPassword']>['onPasswordReset']>
|
||
|
|
>[0];
|
||
|
|
|
||
|
|
async function sendResetPassword(options: ResetPasswordOptions) {
|
||
|
|
const { user, url } = options;
|
||
|
|
|
||
|
|
const [profile] = await db.select().from(schema.profile).where(eq(schema.profile.id, user.id)).limit(1);
|
||
|
|
if (!profile) {
|
||
|
|
throw new Error('Profile not found');
|
||
|
|
}
|
||
|
|
|
||
|
|
await sendEmail('forgotPassword', {
|
||
|
|
to: user.email,
|
||
|
|
fields: {
|
||
|
|
name: profile.fullname,
|
||
|
|
email: user.email,
|
||
|
|
link: url
|
||
|
|
}
|
||
|
|
});
|
||
|
|
}
|
||
|
|
|
||
|
|
async function onPasswordReset(options: OnPasswordResetEmail) {
|
||
|
|
const { user } = options;
|
||
|
|
|
||
|
|
const [profile] = await db.select().from(schema.profile).where(eq(schema.profile.id, user.id)).limit(1);
|
||
|
|
if (!profile) {
|
||
|
|
throw new Error('Profile not found');
|
||
|
|
}
|
||
|
|
|
||
|
|
await sendEmail('onPasswordReset', {
|
||
|
|
to: user.email,
|
||
|
|
fields: {
|
||
|
|
name: profile.fullname
|
||
|
|
}
|
||
|
|
});
|
||
|
|
}
|