nextauthjs/next-auth-example
Next Auth Example
Este proyecto es una implementación de referencia y boilerplate para gestionar la autenticación de usuarios y el estado de la sesión dentro del framework Next.js. Sirve como un ejemplo práctico de cómo integrar NextAuth.js para proteger rutas y manejar la verificación de identidad.
El repositorio demuestra varios flujos de trabajo de autenticación, incluyendo la integración de identidad OAuth con proveedores de terceros, autenticación sin contraseña utilizando enlaces mágicos por correo electrónico y el inicio de sesión tradicional basado en credenciales. Muestra específicamente cómo reemplazar las pantallas de autenticación predeterminadas con páginas de inicio de sesión personalizadas.
La implementación cubre una amplia gama de capacidades, incluyendo la persistencia de sesiones en bases de datos mediante adaptadores, la rotación de tokens de acceso y el uso de variables de entorno para la configuración del proveedor. También incluye ejemplos de vinculación de múltiples métodos de autenticación a un solo perfil de usuario e integración de herramientas de observabilidad para registrar eventos de autenticación.
Features
- User Identity Verification - Provides a comprehensive system to verify user identities via OAuth providers, email magic links, and traditional credentials.
- Next.js Development - Provides a comprehensive implementation of secure identity verification and session management for Next.js applications.
- Session-Scoped Data Stores - Ships capabilities for saving user profiles and account details to databases so they persist across sessions.
- Database Adapters - Uses standardized adapter interfaces to decouple authentication logic from specific database engines.
- Relational Database Session Stores - Supports persisting user profiles and session data in relational databases using various ORMs and adapters.
- Authentication Frameworks - Integrates authentication and session management logic directly into the Next.js framework.
- NextAuth.js Implementations - Provides a practical reference project for integrating NextAuth.js for session management and OAuth logins.
- OAuth and Identity Providers - Delegates user verification to third-party identity providers using standardized OAuth authorization flows.
- Authentication Management - Provides a reference implementation for managing user authentication lifecycles and identity verification.
- External Database Persistence - Stores authentication session data in external databases to maintain persistent login states across server instances.
- Credential Validation - Validates users via traditional username and password combinations checked against stored credential hashes.
- OAuth Provider Integrations - Integrates with external OAuth providers by specifying client credentials, custom scopes, and profile mapping.
- Passwordless Authentication - Implements passwordless authentication using email magic links and temporary verification tokens.
- Database-Backed Session Authentications - Demonstrates authentication flows that validate credentials against remote databases to manage session tokens.
- Cookie-Based Session Management - Manages authenticated states across page requests by storing encrypted session tokens in browser cookies.
- User Account Management - Implements systems for managing user credentials, authentication states, and profile security settings.
- Server-Side Session Management - Controls the storage and retrieval of user session data using both client-side cookies and server-side database storage.
- ORM Adapters - Implements an abstraction layer allowing the use of various ORMs and databases to store user profiles and session state.
- Next.js Starter Kits - Provides a pre-configured boilerplate for bootstrapping Next.js applications with integrated session and route protection.
- Environment-Based Credential Configuration - Automatically loads provider client IDs and secrets from environment variables using standardized naming.
- Environment Variable Secret Loading - Loads client credentials and secrets from system environment variables based on standardized naming conventions.
- Customizable Login Interfaces - Allows the replacement of default authentication screens with custom, branded sign-in pages.
- Account Linking - Manages the linking of multiple authentication methods to a single user profile based on email address.
- Session Token Rotation - Implements mechanisms for renewing active sessions by rotating authentication tokens to avoid frequent re-sign-ins.
- Route Authentication - Maps authentication requests to specific API endpoints or routes to separate authentication logic from the UI.
- Authentication Lifecycle Callbacks - Provides hook functions to modify user profiles and session data during the authentication lifecycle.
- Custom Authentication Interfaces - Supports disabling pre-built components to implement completely custom frontend routes for authentication.
- Authentication Page Templates - Provides the ability to use customizable templates for rendering branded sign-in and error pages.
