Vachan MN Posts - Answer Overflow

Vachan MN

Explore posts from servers

DIAdiscord.js - Imagine an app TTCTheo's Typesafe Cult

•Created by Vachan MN on 4/13/2025 in #questions

Good RBAC implementation for create-t3-app?

Hey, I was looking for a good Role based access control implementation example or library that I could use with ct3a. If anyone has any references, please do let me know. Thanks!

1 replies

TTCTheo's Typesafe Cult

•Created by Vachan MN on 2/15/2025 in #questions

Using credentials provider

Hey guys! I was looking for some kind of info on how I can use credentials provider with NextAuth while using ct3a. I know its insecure and isnt recommended for use and all that but I have a client who wants it. Can anyone help out or point me towards an implementation that works? For context I am using the latest version of ct3a, Prisma, NextAuth, trpc and app router I have added the credentials provider as follows:

providers: [
    CredentialsProvider({
      name: "Credentials",
      credentials: {
        email: { label: "Email", type: "email" },
        password: { label: "Password", type: "password" },
      },
      async authorize(credentials) {
        const account = await db.account.findFirst({
          where: {
            email: credentials.email as string,
          },
          include: {
            user: true,
          },
        });

        if (account?.passwordHash) {
          // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access
          const isValid = await bcrypt.compare(
            credentials.password as string,
            account.passwordHash,
          );
          console.log("isValid", isValid);
          if (isValid) {
            // eslint-disable-next-line @typescript-eslint/no-unsafe-return
            return account.user;
          } else {
            return null;
          }
        } else {
          return null;
        }
      },
    }),
  ],

providers: [
    CredentialsProvider({
      name: "Credentials",
      credentials: {
        email: { label: "Email", type: "email" },
        password: { label: "Password", type: "password" },
      },
      async authorize(credentials) {
        const account = await db.account.findFirst({
          where: {
            email: credentials.email as string,
          },
          include: {
            user: true,
          },
        });

        if (account?.passwordHash) {
          // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access
          const isValid = await bcrypt.compare(
            credentials.password as string,
            account.passwordHash,
          );
          console.log("isValid", isValid);
          if (isValid) {
            // eslint-disable-next-line @typescript-eslint/no-unsafe-return
            return account.user;
          } else {
            return null;
          }
        } else {
          return null;
        }
      },
    }),
  ],

2 replies

Gaming

Programming