How to implement next-auth with convex?

[weary bough]

Hi!
I am building a next.js application. The basic idea is to create teams/projects to work together in X,Y,Z stuff. I am having some problems with authentication, I set up next-auth with some providers and the sessions work fine. But when it comes to Convex, I don't know how to protect data (only allow memebers of a team access the data of that team). And when an user authenticates if its new I would like to add it to the DB else just access that user data from the DB.

Thanks for your time!

[hexed ridge]

Hey there!

You generally want to set up a users table in Convex to store your users in, and sync relevant data from your auth provider, typically the id used by the auth provider is one such field.

When the user signs up or logs in, get the convex user based on the auth info. If there's no user, that's when you create one.

Once you have a user from your Convex table, you can use that for any authorization across your app. For example if you only want members of a given team to be able to view that team's projects, you can write a function that takes the current Convex user document and asserts team membership, and run that before executing a privileged query.

There are helpers to make this a bit simpler too - convex helpers, for example, gives a library and patterns for auth: https://stack.convex.dev/custom-functions#modifying-the-ctx-argument-to-a-server-function-for-user-auth

[weary bough]

Amazing! Thank you very much. I'll try to implement it

[wide anchor]

I have an implementation of it which I made on top of @rotund sun's work
https://github.com/trace2798/convex_feedit

[rotund sun]

Thanks! I have made a more type-save version in the official auth.js pr but it might not be merged for a while sadly. I will have to try to get the convex team to help with getting it added as an official plugin.

heres a link https://github.com/ThatGuyJamal/next-auth/blob/ConvexDB-Adapter/packages/adapter-convex/src/index.ts

[wide anchor]

Noice. I will check this out. Having this official adapter will be of great help

[rotund sun]

yeah, the main reason i didnt do to much work is i just wanted to lay the ground work for the team to view and have ideas. Also with the popularity of next-auth convex would get mote eyes on it being in there docs i would think? @mild hull. I think this would be good since convex wants to have good web supports and auth.js is a good option.

[wide anchor]

Yup. That's what I put on the feedback form too. I think having an official example will help a lot

[ripe fjord]

https://github.com/xipanca/nextjs-ts-nextauth-convex

[sage parrot]

Sweet! Thanks for sharing, what I needed. 🙏🏽

[sage parrot]

Wow, nice work!

[tulip sable]

@ripe fjord this is a nice start, but it seems to cover only gating routes based on NextAuth. I think folks here would want to combine this with a way to authenticate the client (which NextAuth doesn’t make easy, but could be done via session IDs or custom JWTs).