signup and loginbasics

apps/web/package.json

@@ -13,9 +13,11 @@
     "@headlessui/react": "^1.7.4",
     "@heroicons/react": "^2.0.13",
     "@tailwindcss/forms": "^0.5.3",
+    "@types/bcryptjs": "^2.4.2",
     "@types/node": "18.11.9",
     "@types/react": "18.0.25",
     "@types/react-dom": "18.0.9",
+    "bcryptjs": "^2.4.3",
     "dotenv": "^16.0.3",
     "eslint": "8.27.0",
     "eslint-config-next": "13.0.3",

apps/web/pages/api/auth/[...nextauth].ts

@@ -1,11 +1,70 @@
 import NextAuth from "next-auth";
 import GitHubProvider from "next-auth/providers/github";
+import CredentialsProvider from "next-auth/providers/credentials";
+import { ErrorCode } from "@documenso/lib/auth";
+import prisma from "@documenso/prisma";
+import { verifyPassword } from "@documenso/lib/auth";
 
 export default NextAuth({
   providers: [
-    GitHubProvider({
-      clientId: "df804870b0d11b0779cf",
-      clientSecret: "7ef4bbc0957e48e4e6e59c5b5879b3d75d90acc5",
+    CredentialsProvider({
+      id: "crediantials",
+      name: "Documenso.com Login",
+      type: "credentials",
+      credentials: {
+        email: {
+          label: "Email Address",
+          type: "email",
+          placeholder: "john.doe@example.com",
+        },
+        password: {
+          label: "Password",
+          type: "password",
+          placeholder:
+            "Select a password. Here is some inspiration: https://xkcd.com/936/",
+        },
+      },
+      async authorize(credentials: any) {
+        if (!credentials) {
+          console.error("Credential missing in authorize()");
+          throw new Error(ErrorCode.InternalServerError);
+        }
+
+        const user = await prisma.user.findUnique({
+          where: {
+            email: credentials.email.toLowerCase(),
+          },
+          select: {
+            id: true,
+            email: true,
+            password: true,
+            name: true,
+          },
+        });
+
+        if (!user) {
+          throw new Error(ErrorCode.UserNotFound);
+        }
+
+        if (!user.password) {
+          throw new Error(ErrorCode.UserMissingPassword);
+        }
+
+        const isCorrectPassword = await verifyPassword(
+          credentials.password,
+          user.password
+        );
+
+        if (!isCorrectPassword) {
+          throw new Error(ErrorCode.IncorrectPassword);
+        }
+
+        return {
+          id: user.id.toString(),
+          email: user.email,
+          name: user.name,
+        };
+      },
     }),
   ],
 });

apps/web/pages/api/auth/signup.ts

@@ -0,0 +1,58 @@
+import { IdentityProvider } from "@prisma/client";
+import { NextApiRequest, NextApiResponse } from "next";
+
+import prisma from "@documenso/prisma";
+import { hashPassword } from "@documenso/lib/auth";
+import { defaultHandler, defaultResponder } from "@documenso/lib/server";
+
+async function postHandler(req: NextApiRequest, res: NextApiResponse) {
+  const data = req.body;
+  const { email, password } = data;
+  const cleanEmail = email.toLowerCase();
+
+  if (!cleanEmail || !cleanEmail.includes("@")) {
+    res.status(422).json({ message: "Invalid email" });
+    return;
+  }
+
+  if (!password || password.trim().length < 7) {
+    res.status(422).json({
+      message: "Invalid input - password should be at least 7 characters long.",
+    });
+    return;
+  }
+
+  // User already exists if email already exists
+  const existingUser = await prisma.user.findFirst({
+    where: {
+      email: cleanEmail,
+    },
+  });
+
+  if (existingUser) {
+    const message: string = "Email address is already registered";
+    return res.status(409).json({ message });
+  }
+
+  const hashedPassword = await hashPassword(password);
+
+  const user = await prisma.user.upsert({
+    where: { email: cleanEmail },
+    update: {
+      password: hashedPassword,
+      emailVerified: new Date(Date.now()),
+      identityProvider: IdentityProvider.DOCUMENSO,
+    },
+    create: {
+      email: cleanEmail,
+      password: hashedPassword,
+      identityProvider: IdentityProvider.DOCUMENSO,
+    },
+  });
+
+  res.status(201).json({ message: "Created user" });
+}
+
+export default defaultHandler({
+  POST: Promise.resolve({ default: defaultResponder(postHandler) }),
+});