@auth/core/lib/routes/signin.js

Authentication for the Web.

import emailSignin from "../email/signin.js";
import { SignInError } from "../../errors.js";
import { getAuthorizationUrl } from "../oauth/authorization-url.js";
import { handleAuthorized } from "./shared.js";
/**
 * Initiates the sign in process for OAuth and Email flows .
 * For OAuth, redirects to the provider's authorization URL.
 * For Email, sends an email with a sign in link.
 */
export async function signin(request, options) {
    const { query, body } = request;
    const { url, logger, provider } = options;
    try {
        if (provider.type === "oauth" || provider.type === "oidc") {
            return await getAuthorizationUrl(query, options);
        }
        else if (provider.type === "email") {
            const normalizer = provider.normalizeIdentifier ?? defaultNormalizer;
            const email = normalizer(body?.email);
            const user = (await options.adapter.getUserByEmail(email)) ?? {
                id: email,
                email,
                emailVerified: null,
            };
            const account = {
                providerAccountId: email,
                userId: user.id,
                type: "email",
                provider: provider.id,
            };
            const unauthorizedOrError = await handleAuthorized({ user, account, email: { verificationRequest: true } }, options);
            if (unauthorizedOrError)
                return unauthorizedOrError;
            const redirect = await emailSignin(email, options, request);
            return { redirect };
        }
        return { redirect: `${url}/signin` };
    }
    catch (e) {
        const error = new SignInError(e, { provider: provider.id });
        logger.error(error);
        const code = provider.type === "email" ? "EmailSignin" : "OAuthSignin";
        url.searchParams.set("error", code);
        url.pathname += "/signin";
        return { redirect: url.toString() };
    }
}
function defaultNormalizer(email) {
    if (!email)
        throw new Error("Missing email from request body.");
    // Get the first two elements only,
    // separated by `@` from user input.
    let [local, domain] = email.toLowerCase().trim().split("@");
    // The part before "@" can contain a ","
    // but we remove it on the domain part
    domain = domain.split(",")[0];
    return `${local}@${domain}`;
}