Authentication with Credentials with Create T3
Hi! Has anyone done a project using create t3 then used credentials with NextAuth? I found a tutorial online, but it seems to do things pretty differently from the way they would be done in the create t3 scaffolding.
For reference this is the article that I was looking at, https://dev.to/franciscomendes10866/nextjs-authentication-with-next-auth-trpc-and-prisma-kgl. I tried to add/configure from this project to the create t3 scaffold, but I didn't have any success.
5 Replies
Unknown User•2y ago
Message Not Public
Sign In & Join Server To View
Little hint in case your login page is public:
I would suggest not giving feedback like
throw new Error("No user found"); since it could be abused to receive data about your registered users' emails.
Example:
Putting in notregistered@user.com -> No user found
Putting in registered@user.com -> Invalid credentials
-> Now the attacker knows registered@user.com has an account on your platform and could continue trying to get into that email account or do some other shenanigansUnknown User•2y ago
Message Not Public
Sign In & Join Server To View
@Froxx @noided I got it figured out, if you want to know more just ping me and I would happily show you 🙂
Happy to hear that! Would be nice in general to tell what your problem was just for other people in the feature who might stumble upon this question