Husky Login Requirement

apps/auth-proxy/routes/r/[...auth].ts

@@ -14,5 +14,15 @@ export default eventHandler(async (event) =>
         clientSecret: process.env.AUTH_GOOGLE_SECRET,
       }),
     ],
+    callbacks: {
+      signIn({ user }) {
+        const email = user.email;
+
+        if (!email?.endsWith("@husky.neu.edu")) {
+          return false;
+        }
+        return true;
+      },
+    },
   }),
 );

apps/docs/docs/03-backend/auth.mdx

@@ -62,7 +62,9 @@ export async function AuthShowcase() {
 The `auth()` function can only be run on the server side so we currently fetch the session information on the server side and pass it to the client side. In the above example, we make use of form actions to trigger the sign-in and sign-out functions.
 :::
 
-One thing that we can hope for is that noone will ever have to work on this code since authentication is always a pain.
+:::note
+We require users to sign in with their @husky.neu.edu email addresses, and if they try to sign in with something else, they are prompted to sign in again.
+:::
 
 ### `Session` Type
 

apps/web/src/app/(pages)/(dashboard)/redirection/page.tsx

@@ -0,0 +1,17 @@
+import React from "react";
+
+export default function ErrorPage() {
+  return (
+    <div className="flex min-h-screen items-center justify-center">
+      <div className="text-center">
+        <h1 className="mb-4 text-2xl font-bold text-gray-900">
+          Authentication Error
+        </h1>
+        <p className="mb-4 text-gray-600">You must log in with husky.neu.edu</p>
+        <p className="mb-4 text-gray-600">
+          Click the sign in button to try again
+        </p>
+      </div>
+    </div>
+  );
+}

apps/web/src/app/_components/auth/login-button.tsx

@@ -8,7 +8,7 @@ export default function LoginButton() {
         className="rounded-xl border-cooper-blue-400 bg-cooper-blue-400 px-5 py-2.5 text-sm font-semibold text-white hover:border-cooper-blue-200 hover:bg-cooper-blue-200 hover:text-cooper-blue-600 focus:outline-none focus:ring-4 focus:ring-white"
         formAction={async () => {
           "use server";
-          await signIn("google");
+          await signIn("google", { redirectTo: "/" });
         }}
       >
         Sign In

apps/web/src/app/_components/auth/logout-button.tsx

@@ -8,7 +8,7 @@ export default function LogoutButton() {
         className="rounded-xl border-cooper-blue-400 bg-cooper-blue-400 px-5 py-2.5 text-sm font-semibold text-white hover:border-cooper-blue-200 hover:bg-cooper-blue-200 hover:text-cooper-blue-600 focus:outline-none focus:ring-4 focus:ring-white"
         formAction={async () => {
           "use server";
-          await signOut();
+          await signOut({ redirectTo: "/" });
         }}
       >
         Sign Out

packages/auth/src/config.ts

@@ -60,6 +60,14 @@ export const authConfig = {
         },
       };
     },
+    signIn({ user }) {
+      const email = user.email;
+
+      if (!email?.endsWith("@husky.neu.edu")) {
+        return "/redirection";
+      }
+      return true;
+    },
   },
 } satisfies NextAuthConfig;
 

packages/auth/tsconfig.json

@@ -1,8 +1,9 @@
 {
   "extends": "@cooper/tsconfig/base.json",
   "compilerOptions": {
+    "jsx": "react",
     "tsBuildInfoFile": "node_modules/.cache/tsbuildinfo.json"
   },
-  "include": ["src", "*.ts"],
+  "include": ["src", "*.ts", "../../apps/web/error-page.tsx"],
   "exclude": ["node_modules"]
 }