Phase 3. 인증 및 공통 레이아웃 작업

auth.ts

@@ -0,0 +1,115 @@
+import NextAuth, { type DefaultSession } from "next-auth";
+import Credentials from "next-auth/providers/credentials";
+import { z } from "zod";
+
+import { ACTIVATE_STATUSES } from "@/lib/constants";
+
+const credentialsSchema = z.object({
+  adminName: z.string().trim().min(1),
+  password: z.string().min(1),
+});
+
+type AdminAuthRow = {
+  AdminID: bigint | number;
+  Name: string;
+  Email: string;
+  AccountType: bigint | number;
+  ActivateStatus: bigint | number;
+};
+
+declare module "next-auth" {
+  interface Session {
+    user: {
+      adminID: number;
+      accountType: number;
+      activateStatus: number;
+    } & DefaultSession["user"];
+  }
+
+  interface User {
+    accountType: number;
+    activateStatus: number;
+  }
+}
+
+declare module "next-auth/jwt" {
+  interface JWT {
+    accountType?: number;
+    activateStatus?: number;
+  }
+}
+
+export const {
+  handlers: { GET, POST },
+  auth,
+  signIn,
+  signOut,
+} = NextAuth({
+  pages: {
+    signIn: "/login",
+  },
+  session: {
+    strategy: "jwt",
+  },
+  providers: [
+    Credentials({
+      credentials: {
+        adminName: { label: "관리자 아이디", type: "text" },
+        password: { label: "암호", type: "password" },
+      },
+      async authorize(credentials) {
+        const parsedCredentials = credentialsSchema.safeParse(credentials);
+
+        if (!parsedCredentials.success) {
+          return null;
+        }
+
+        const { db } = await import("@/lib/db");
+        const { adminName, password } = parsedCredentials.data;
+        const admins = await db.$queryRaw<AdminAuthRow[]>`
+          SELECT AdminID, Name, Email, AccountType, ActivateStatus
+          FROM admin
+          WHERE Name = ${adminName} AND Password = PASSWORD(${password})
+          LIMIT 1
+        `;
+        const admin = admins[0];
+        const adminID = Number(admin?.AdminID);
+        const accountType = Number(admin?.AccountType);
+        const activateStatus = Number(admin?.ActivateStatus);
+
+        if (!admin || activateStatus === ACTIVATE_STATUSES.PENDING) {
+          return null;
+        }
+
+        return {
+          id: String(adminID),
+          name: admin.Name,
+          email: admin.Email,
+          accountType,
+          activateStatus,
+        };
+      },
+    }),
+  ],
+  callbacks: {
+    jwt({ token, user }) {
+      if (user) {
+        token.accountType = user.accountType;
+        token.activateStatus = user.activateStatus;
+      }
+
+      return token;
+    },
+    session({ session, token }) {
+      return {
+        ...session,
+        user: {
+          ...session.user,
+          adminID: Number(token.sub),
+          accountType: Number(token.accountType),
+          activateStatus: Number(token.activateStatus),
+        },
+      };
+    },
+  },
+});