@hyperspaceinc/next-auth NPM

Overview

NextAuth.js is a complete open source authentication solution for Next.js applications.

It is designed from the ground up to support Next.js and Serverless.

Getting Started

npm install --save next-auth

The easiest way to continue getting started, is to follow the getting started section in our docs.

We also have a section of tutorials for those looking for more specific examples.

See next-auth.js.org for more information and documentation.

Features

Flexible and easy to use

Designed to work with any OAuth service, it supports OAuth 1.0, 1.0A and 2.0
Built-in support for many popular sign-in services
Supports email / passwordless authentication
Supports stateless authentication with any backend (Active Directory, LDAP, etc)
Supports both JSON Web Tokens and database sessions
Designed for Serverless but runs anywhere (AWS Lambda, Docker, Heroku, etc…)

Own your own data

NextAuth.js can be used with or without a database.

An open source solution that allows you to keep control of your data
Supports Bring Your Own Database (BYOD) and can be used with any database
Built-in support for MySQL, MariaDB, Postgres, Microsoft SQL Server, MongoDB and SQLite
Works great with databases from popular hosting providers
Can also be used without a database (e.g. OAuth + JWT)

Secure by default

Promotes the use of passwordless sign in mechanisms
Designed to be secure by default and encourage best practice for safeguarding user data
Uses Cross Site Request Forgery Tokens on POST routes (sign in, sign out)
Default cookie policy aims for the most restrictive policy appropriate for each cookie
When JSON Web Tokens are enabled, they are signed by default (JWS) with HS512
Use JWT encryption (JWE) by setting the option encryption: true (defaults to A256GCM)
Auto-generates symmetric signing and encryption keys for developer convenience
Features tab/window syncing and keepalive messages to support short lived sessions
Attempts to implement the latest guidance published by Open Web Application Security Project

Advanced options allow you to define your own routines to handle controlling what accounts are allowed to sign in, for encoding and decoding JSON Web Tokens and to set custom cookie security policies and session properties, so you can control who is able to sign in and how often sessions have to be re-validated.

TypeScript

You can install the appropriate types via the following command:

npm install --save-dev @types/next-auth

As of now, TypeScript is a community effort. If you encounter any problems with the types package, please create an issue at DefinitelyTyped. Alternatively, you can open a pull request directly with your fixes there. We welcome anyone to start a discussion on migrating this package to TypeScript, or how to improve the TypeScript experience in general.

Example

Add API Route

import NextAuth from 'next-auth'
import Providers from 'next-auth/providers'

export default NextAuth({
  providers: [
    // OAuth authentication providers
    Providers.Apple({
      clientId: process.env.APPLE_ID,
      clientSecret: process.env.APPLE_SECRET
    }),
    Providers.Google({
      clientId: process.env.GOOGLE_ID,
      clientSecret: process.env.GOOGLE_SECRET
    }),
    // Sign in with passwordless email link
    Providers.Email({
      server: process.env.MAIL_SERVER,
      from: '<no-reply@example.com>'
    }),
  ],
  // SQL or MongoDB database (or leave empty)
  database: process.env.DATABASE_URL
})

Add React Component

import {
  useSession, signIn, signOut
} from 'next-auth/client'

export default function Component() {
  const [ session, loading ] = useSession()
  if(session) {
    return <>
      Signed in as {session.user.email} <br/>
      <button onClick={() => signOut()}>Sign out</button>
    </>
  }
  return <>
    Not signed in <br/>
    <button onClick={() => signIn()}>Sign in</button>
  </>
}