Error with CredentialsProvider | nextAuth

Unanswered

Naeemgg posted this in #help-forum

2023-10-07T17:17:47.000Z

Can anyone please take a look at my authOptions and tell me what is wrong I'm doing here, I was getting type errors so I made it .js but still when both username and password are valid only then everything is going fine otherwise it's showing server error instead of wrong username or password.

This is my authOptions:

import NextAuth, { AuthOptions } from "next-auth"; 
 import CredentialsProvider from "next-auth/providers/credentials"; 
 import prisma from "@/prisma/client"; 
  
 export const authOptions = { 
   providers: [ 
     CredentialsProvider({ 
       name: "credentials", 
       credentials: { 
         name: { 
           label: "name", 
           type: "name", 
           placeholder: "Faizan", 
         }, 
         password: { 
           label: "password", 
           type: "password", 
           placeholder: "******", 
         }, 
       }, 
       async authorize(credentials, req) { 
         const { name, password } = credentials; 
  
         const user = await prisma.user.findUnique({ where: { name,password } }); 
  
         if (!user) { 
           throw new Error("Invalid email or password"); 
         } 
         return user; 
       }, 
     }), 
   ], 
   secret: process.env.NEXTAUTH_SECRET, 
 } 
 const handler = NextAuth(authOptions); 
  
 export { handler as GET, handler as POST };

8 Replies

Satin Angora

2023-10-07T19:58:33.000Z

1. Dont store passwords in plain text.
2. there is no type "name" on an html input. Change "name" to "text"
3. Select the user by name, then check if the record exists, then compare the passwords.

Something like that:

         const user = await prisma.user.findUnique({ where: { name: name } });
  
         if (!user) { 
           throw new Error("User not found"); 
         } 
// You may want to check out bcrypt package for hashing and salting, instead of comparing plain text passwords
         if (user.password !== password) {
              throw new Error("Password is incorrect");
         }

@Satin Angora 1. Dont store passwords in plain text. 2. there is no type "name" on an html input. Change "name" to "text" 3. Select the user by name, then check if the record exists, then compare the passwords. Something like that: const user = await prisma.user.findUnique({ where: { name: name } }); if (!user) { throw new Error("User not found"); } // You may want to check out bcrypt package for hashing and salting, instead of comparing plain text passwords if (user.password !== password) { throw new Error("Password is incorrect"); }

NaeemggOP

2023-10-08T15:29:25.000Z

1: stored hashed password
2: changed it
3: done
Now this is how my authOptions looks like:

import NextAuth, { AuthOptions } from "next-auth"; 
 import CredentialsProvider from "next-auth/providers/credentials"; 
 import prisma from "@/prisma/client"; 
 import bcrypt from "bcryptjs" 
 export const authOptions = { 
   providers: [ 
     CredentialsProvider({ 
       name: "credentials", 
       credentials: { 
         name: { 
           label: "name", 
           type: "text", 
           placeholder: "Faizan", 
         }, 
         password: { 
           label: "password", 
           type: "password", 
           placeholder: "******", 
         }, 
       }, 
       async authorize(credentials, req) { 
         const { name, password } = credentials; 
         const user = await prisma.user.findUnique({ where: { name:name } }); 
  
         if (!user) { 
           throw new Error("Invalid email or password"); 
         } 
         const isPasswordMatched = await bcrypt.compare(password, user.password); 
         if (!isPasswordMatched) { 
           alert("Invalid password or email") 
           throw new Error("Invalid email or password"); 
         } 
         return user; 
       }, 
     }), 
   ], 
   secret: process.env.NEXTAUTH_SECRET, 
 } 
 const handler = NextAuth(authOptions); 
  
 export { handler as GET, handler as POST };