Next.js + NextAuth.js

Next.js App Router дээр sso.gerege.mn OIDC нэгтгэх.

npm install next-auth@beta

import NextAuth from "next-auth"

export const { handlers, signIn, signOut, auth } = NextAuth({
  providers: [{
    id: "gerege-sso",
    name: "e-ID Mongolia",
    type: "oidc",
    issuer: "https://sso.gerege.mn",
    clientId: process.env.EID_CLIENT_ID!,
    clientSecret: process.env.EID_CLIENT_SECRET!,
    authorization: { params: { scope: "openid profile pos" } },
  }],
  callbacks: {
    async jwt({ token, profile }) {
      if (profile) {
        token.sub = profile.sub
        token.name = profile.name
        token.certSerial = profile.cert_serial
        token.tenantId = profile.tenant_id
        token.tenantRole = profile.tenant_role
      }
      return token
    },
  },
})

import { handlers } from "@/lib/auth"
export const { GET, POST } = handlers

NEXTAUTH_URL=http://localhost:3000
NEXTAUTH_SECRET=your-random-secret
EID_CLIENT_ID=your-client-id
EID_CLIENT_SECRET=your-client-secret

import { signIn } from "@/lib/auth"

export default function LoginPage() {
  return (
    <form action={async () => {
      "use server"
      await signIn("gerege-sso")
    }}>
      <button type="submit">e-ID Mongolia-р нэвтрэх</button>
    </form>
  )
}

import { auth } from "@/lib/auth"
import { redirect } from "next/navigation"

export default async function DashboardPage() {
  const session = await auth()
  if (!session) redirect("/api/auth/signin")

  return <h1>Hello {session.user?.name}</h1>
}