kroxt

import { createAuth } from "kroxt"; import { createMongoAdapter } from "kroxt/adapters/mongoose"; import { NextRequest, NextResponse } from "next/server"; // IMPORTANT: Replace this mock with your actual Mongoose User model. // Example: import { Schema, model } from 'mongoose'; // const UserSchema = new Schema({ email: { type: String, unique: true }, password: String, /* ... */ }); // export const User = model('User', UserSchema); const User = { modelName: 'MockUser', findOne: async (query: any) => { // Simulate finding a user by email for login if (query.email === 'test@example.com') return { email: 'test@example.com', password: 'hashedpassword' }; return null; }, create: async (data: any) => ({ // Simulate user creation _id: 'mockid123', ...data }) }; // This mock makes the example runnable without a full Mongoose setup. // 1. Initialize Kroxt authentication engine (e.g., in `lib/kroxt/auth.ts`) export const auth = createAuth({ adapter: createMongoAdapter(User), secret: process.env.JWT_SECRET ?? 'super-secret-change-me-in-production', session: { expires: '15m', refreshExpires: '7d', enforceStrictRevocation: true }, passwordPolicy: { minLength: 8, requireUppercase: true, requireSpecialCharacter: true, usePepper: false // Set to true if you define process.env.JWT_PEPPER } }); // 2. Example Login Route Handler for Next.js App Router (e.g., `app/api/auth/login/route.ts`) export async function POST(req: NextRequest) { try { const { email, password } = await req.json(); // `req.ip` might be `undefined` in development or certain environments; provide a fallback. const result = await auth.loginWithPassword(email, password, req.ip ?? 'unknown'); // In a real application, you might set cookies or return specific tokens. return NextResponse.json(result, { status: 200 }); } catch (error: any) { // Log the error internally but provide a generic message to the client for security. console.error('Login attempt failed:', error.message); return NextResponse.json({ error: error.message || 'Authentication failed' }, { status: 401 }); } }