Files
classroomio/packages/db/src/auth/email-password.ts
T
Rotimi Best a3924100dd feat: migrate auth from supabase to better auth (#596)
* feat: add README for @cio/db package and remove existingAccounts.json

* load session, load profile and organization, add create profile hook

* chore: cache session request

The trick was passing all the cookies to the backend. Previously I was only passing the better-auth.session_token and not better-auth.session_data. Read about the difference here https://www.better-auth.com/docs/concepts/cookies#custom-cookies

* feat: login, logout, onboarding, verify email, reset password.

* feat: complete change email and email verification

* feat: standardise how we make rpc calls and create org endpoints

* fix ui errors

* fix: handle potential undefined customerId and standardize avatar URL property

* refactor: standardize custom domain handling and update telegram chat ID references

* chore: add tailwind prefix to @cio/ui

this fixed the media query issues because  @cio/ui classes were overriding this dashboard tailwind build

* chore: clean up org sidebar

* chore: persist mode state

* feat: implement order breadcrumbs

* chore: upgrade to better auth 1.4

* chore: address common auth flow bugs and setup app for others to setup locally.
2025-11-24 01:00:50 +01:00

69 lines
1.8 KiB
TypeScript

import * as schema from '@db/schema';
import bcrypt from 'bcrypt';
import { db, eq } from '@db/drizzle';
import { type BetterAuthOptions } from 'better-auth';
import { sendEmail } from '@cio/email';
/**
* Configuration for the email and password options
* @see https://www.better-auth.com/docs/authentication/email-password
*/
export const config: BetterAuthOptions['emailAndPassword'] = {
enabled: true,
password: {
hash: async (password) => {
return await bcrypt.hash(password, 10);
},
verify: async ({ hash, password }) => {
return await bcrypt.compare(password, hash);
}
},
sendResetPassword: sendResetPassword,
onPasswordReset: onPasswordReset
};
/**
* Types for the email and password options
*/
type ResetPasswordOptions = Parameters<
NonNullable<NonNullable<BetterAuthOptions['emailAndPassword']>['sendResetPassword']>
>[0];
type OnPasswordResetEmail = Parameters<
NonNullable<NonNullable<BetterAuthOptions['emailAndPassword']>['onPasswordReset']>
>[0];
async function sendResetPassword(options: ResetPasswordOptions) {
const { user, url } = options;
const [profile] = await db.select().from(schema.profile).where(eq(schema.profile.id, user.id)).limit(1);
if (!profile) {
throw new Error('Profile not found');
}
await sendEmail('forgotPassword', {
to: user.email,
fields: {
name: profile.fullname,
email: user.email,
link: url
}
});
}
async function onPasswordReset(options: OnPasswordResetEmail) {
const { user } = options;
const [profile] = await db.select().from(schema.profile).where(eq(schema.profile.id, user.id)).limit(1);
if (!profile) {
throw new Error('Profile not found');
}
await sendEmail('onPasswordReset', {
to: user.email,
fields: {
name: profile.fullname
}
});
}