Authentication

1. Environment Variables

Create or update your .env.local file:

# Auth.js configuration
NEXTAUTH_URL=http://localhost:3000
NEXTAUTH_SECRET=your_secret_key

# Google OAuth
GOOGLE_CLIENT_ID=your_google_client_id
GOOGLE_CLIENT_SECRET=your_google_client_secret

# Email (Resend)
RESEND_API_KEY=your_resend_api_key
RESEND_EMAIL=your_email@domain.com

2. Auth Configuration

Set up your authentication configuration in lib/auth.ts:

export const { auth, handlers, signIn, signOut } = NextAuth({
  adapter: DrizzleAdapter(db),
  providers: [
    Google({
      clientId: process.env.GOOGLE_CLIENT_ID!,
      clientSecret: process.env.GOOGLE_CLIENT_SECRET!,
    }),
    Email({
      from: process.env.RESEND_EMAIL,
      sendVerificationRequest: async ({ identifier, url }) => {
        await resend.emails.send({
          from: process.env.RESEND_EMAIL!,
          to: identifier,
          subject: "Sign in to Your App",
          react: MagicLinkEmail({ url }),
        })
      },
    }),
  ],
  // ... rest of configuration
})

Protected API Routes

import { auth } from "@/lib/auth"

export async function GET() {
  const session = await auth()
  if (!session) {
    return new Response("Unauthorized", { status: 401 })
  }
  // Your protected API logic
}

Protected Pages

import { auth } from "@/lib/auth"

export default async function ProtectedPage() {
  const session = await auth()
  if (!session) {
    redirect("/sign-in")
  }
  return <div>Protected Content</div>
}

Getting Current User

import { getCurrentUser } from "@/server/actions/auth-actions"

const { user } = await getCurrentUser()
if (user) {
  // User is authenticated
  console.log(user.email)
}