auth.ts

import NextAuth from "next-auth"
import "next-auth/jwt"

import { createStorage } from "unstorage"
import memoryDriver from "unstorage/drivers/memory"
import { UnstorageAdapter } from "@auth/unstorage-adapter"
import MicrosoftEntraID from "next-auth/providers/microsoft-entra-id"

const storage = createStorage({
  driver: memoryDriver(),
})

export const { handlers, auth, signIn, signOut } = NextAuth({
  debug: !!process.env.AUTH_DEBUG,
  theme: { logo: "https://authjs.dev/img/logo-sm.png" },
  adapter: UnstorageAdapter(storage),
  providers: [
    MicrosoftEntraID({
      clientId: process.env.AUTH_MICROSOFT_ENTRA_ID_ID ?? '',
      clientSecret: process.env.AUTH_MICROSOFT_ENTRA_ID_SECRET ?? '',
      //tenantId: process.env.AUTH_MICROSOFT_ENTRA_ID_TENANT_ID ?? '',
      issuer: process.env.AUTH_MICROSOFT_ENTRA_ID_TENANT_ID,
      authorization: {
        url: process.env.AUTH_MICROSOFT_ENTRA_ID_AUTHORIZATION_URL,
        params: {
          // prompt: 'select_account',
          prompt: 'consent',
          // scope: 'openid profile email',
          // response_type: 'id_token',
          // response_mode: 'form_post',
          // maxAge: 60,
          // grant_type: "authorization_code",
        },
      },
      token: { url: process.env.AUTH_MICROSOFT_ENTRA_ID_TOKEN_URL },
    }),
  ],
  // basePath: "/auth",
  session: { strategy: "jwt" },
  callbacks: {
    authorized({ request, auth }) {
      const { pathname } = request.nextUrl
      if (pathname === "/middleware-example") return !!auth
      return true
    },
    jwt({ token, trigger, session, account }) {
      if (trigger === "update") token.name = session.user.name
      if (account?.provider === "keycloak") {
        return { ...token, accessToken: account.access_token }
      }
      return token
    },
    async session({ session, token }) {
      if (token?.accessToken) session.accessToken = token.accessToken

      return session
    },
  },
  experimental: { enableWebAuthn: true },
})

declare module "next-auth" {
  interface Session {
    accessToken?: string
  }
}

declare module "next-auth/jwt" {
  interface JWT {
    accessToken?: string
  }
}