export async function authenticate(prevState, formData) {
  try {
    const { email, password } = formData;
    await signIn('credentials', { email, password, redirect: true, callbackUrl: '/dashboard' });
  } catch (error) {
    if (error instanceof AuthError) {
      switch (error.type) {
        case 'CredentialsSignin':
          if (error.code === "Email not verified") {
            return error.code;
          }
          return 'Invalid credentials.';
        default:
          return 'Something went wrong.';
      }
    }
    console.error('Authentication error:', error);
    throw error;
  }
}

import { NextResponse } from "next/server";
import { authMiddleware } from "./auth-edge"; // Path to your edge-compatible auth
import {
    authRoutes,
    DEFAULT_REDIRECT_LOGIN_URL,
    DEFAULT_REDIRECT_HOME_URL,
} from "./routes";

export default async function middleware(req) {
    const { isAuthenticated } = await authMiddleware(req);
    const url = req.nextUrl;
    const route = req.nextUrl.pathname;

    // Redirect logged-in users away from auth pages
    if (authRoutes.some((authRoute) => route.startsWith(authRoute))) {
        if (isAuthenticated) {
            return NextResponse.redirect(new URL(DEFAULT_REDIRECT_HOME_URL, url));
        }
        return NextResponse.next();
    }

    // Protect routes except public pages
    if (!(route === "/" || route === "/signin" || route === "/signup")) {
        if (!isAuthenticated) {
            return NextResponse.redirect(new URL(DEFAULT_REDIRECT_LOGIN_URL, url));
        }
    }

    return NextResponse.next();
}

export const config = {
    matcher: ["/((?!api|_next/static|_next/image|.*\\.png$).*)"],
};

export async function authenticate(prevState, formData) {
  try {
    const { email, password } = formData;
    await signIn('credentials', { email, password, redirect: false });
  } catch (error) {
    if (error instanceof AuthError) {
      switch (error.type) {
        case 'CredentialsSignin':
          if (error.code === "Email not verified") {
            return error.code;
          }
          return 'Invalid credentials.';
        default:
          return 'Something went wrong.';
      }
    }
    console.error('Authentication error:', error);
    throw error;
  }
}

        const signInResult = await signIn("credentials", {
            ...
        });

        if (signInResult.ok) {
            if (window.location.href === signInResult.url) {
                if (callbackUrl?.length > 0) {
                    router.refresh();
                    router.push(callbackUrl);
                }
            } else {
                router.push(signInResult.url)
            }
        } else {
            e.target.password.value = "";
            handleError(signInResult.error)
        }

{
        httpOnly: true,
        sameSite: 'none',
        secure: true
}

The same happens to nextauth beta