Remove lucia and setup session authentication from scratch

.devcontainer/compose.dev.yml

@@ -1,17 +1,18 @@
 services:
   workspace:
-    build: 
+    build:
       dockerfile: Dockerfile
     volumes:
       - ../:/workspace:cached
-    command: /bin/sh -c "while sleep 1000; do :; done"  
+    command: /bin/sh -c "while sleep 1000; do :; done"
     depends_on:
       - database
-      
+
   database:
     image: postgres:17.2-alpine
     environment:
       POSTGRES_DB: acme
       POSTGRES_USER: postgres
       POSTGRES_PASSWORD: root
-
+    ports:
+      - 5432:5432

.devcontainer/devcontainer.json

@@ -1,11 +1,25 @@
 {
-  "name": "Next.js Auth Template",
+  "name": "Next.js Dev",
   "dockerComposeFile": ["compose.dev.yml"],
   "service": "workspace",
   "workspaceFolder": "/workspace",
-  "postCreateCommand": "pnpm config set store-dir $HOME/.pnpm-store",
+  "postCreateCommand": "bash ./.devcontainer/postCreateCommand.sh",
   "postStartCommand": "pnpm install",
-  "forwardPorts": [3000],
+  "forwardPorts": [3000, 9323, 4983],
+  "portsAttributes": {
+    "3000": {
+      "label": "Next.js Server",
+      "onAutoForward": "silent"
+    },
+    "9323": {
+      "label": "Playwright Reports",
+      "onAutoForward": "silent"
+    },
+    "4983": {
+      "label": "Drizzle-kit Studio",
+      "onAutoForward": "silent"
+    }
+  },
   "features": {
     "ghcr.io/devcontainers-extra/features/pnpm": "latest"
   },

.devcontainer/postCreateCommand.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+
+pnpm config set store-dir $HOME/.pnpm-store
+pnpm exec playwright install chromium --with-deps

.eslintrc.cjs

@@ -24,7 +24,10 @@ const config = {
         fixStyle: "inline-type-imports",
       },
     ],
-    "@typescript-eslint/no-unused-vars": ["warn", { argsIgnorePattern: "^_" }],
+    "@typescript-eslint/no-unused-vars": [
+      "warn",
+      { argsIgnorePattern: "^_", varsIgnorePattern: "^_" },
+    ],
     "@typescript-eslint/require-await": "off",
     "@typescript-eslint/no-misused-promises": [
       "error",

.github/workflows/check.yaml

@@ -8,6 +8,20 @@ concurrency:
   group: ci-${{ github.ref }}
   cancel-in-progress: true
 
+env:
+  DATABASE_URL: postgres://postgres:root@localhost:5432/acme
+  DISCORD_CLIENT_ID: ${{secrets.DISCORD_CLIENT_ID}}
+  DISCORD_CLIENT_SECRET: ${{secrets.DISCORD_CLIENT_SECRET}}
+  MOCK_SEND_EMAIL: "true"
+  SMTP_HOST: host
+  SMTP_PORT: 587
+  SMTP_USER: user
+  SMTP_PASSWORD: password
+  NEXT_PUBLIC_APP_URL: http://localhost:3000
+  STRIPE_API_KEY: stripe_api_key
+  STRIPE_WEBHOOK_SECRET: stripe_webhook_secret
+  STRIPE_PRO_MONTHLY_PLAN_ID: stripe_pro_monthly_plan_id
+
 permissions:
   contents: read
 
@@ -30,27 +44,22 @@ jobs:
 
       - name: Type Check and Lint
         run: pnpm run typecheck && pnpm run lint
-        env:
-          SKIP_ENV_VALIDATION: true
 
   e2e-test:
     needs: typecheck-and-lint
     timeout-minutes: 60
     runs-on: ubuntu-latest
 
-    env:
-      DATABASE_URL: ${{secrets.DATABASE_URL}}
-      DISCORD_CLIENT_ID: ${{secrets.DISCORD_CLIENT_ID}}
-      DISCORD_CLIENT_SECRET: ${{secrets.DISCORD_CLIENT_SECRET}}
-      MOCK_SEND_EMAIL: "true"
-      SMTP_HOST: host
-      SMTP_PORT: 587
-      SMTP_USER: user
-      SMTP_PASSWORD: password
-      NEXT_PUBLIC_APP_URL: http://localhost:3000
-      STRIPE_API_KEY: stripe_api_key
-      STRIPE_WEBHOOK_SECRET: stripe_webhook_secret
-      STRIPE_PRO_MONTHLY_PLAN_ID: stripe_pro_monthly_plan_id
+    services:
+      postgres:
+        image: postgres:17.2-alpine
+        env:
+          POSTGRES_USER: postgres
+          POSTGRES_PASSWORD: root
+          POSTGRES_DB: acme
+        ports:
+          - 5432:5432
+        options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5
 
     steps:
       - uses: actions/checkout@v2
@@ -62,7 +71,7 @@ jobs:
           node-version: 20.x
           cache: "pnpm"
       - name: Install dependencies
-        run: pnpm install --frozen-lockfile
+        run: pnpm install --frozen-lockfile && pnpm db:push
       - name: Build the app
         run: pnpm build
       - name: Install Playwright Browsers

README.md

@@ -1,20 +1,16 @@
-# Next.js Auth Starter Template
+# Next.js Session-based Auth Starter Template
 
 ## Motivation
 
-Implementing authentication in Next.js, especially Email+Password authentication, can be challenging. NextAuth intentionally limits email password functionality to discourage the use of passwords due to security risks and added complexity. However, in certain projects, clients may require user password authentication. Lucia offers a flexible alternative to NextAuth.js, providing more customization options without compromising on security. This template serves as a starting point for building a Next.js app with Lucia authentication.
-
-## Lucia vs. NextAuth.js
-
-Lucia is less opinionated than NextAuth, offering greater flexibility for customization. While Lucia involves more setup, it provides a higher degree of flexibility, making it a suitable choice for projects requiring unique authentication configurations.
+Implementing authentication in Next.js, especially Email+Password authentication, can be challenging. NextAuth intentionally limits email password functionality to discourage the use of passwords due to security risks and added complexity. However, in certain projects, clients may require user password authentication. Lucia offers a flexible alternative to NextAuth.js, providing more customization options without compromising on security. This template serves as a starting point for building a Next.js app with secure session based authentication.
 
 ## Key Features
 
 - **Authentication:** 💼 Support for Credential and OAuth authentication.
 - **Authorization:** 🔒 Easily manage public and protected routes within the `app directory`.
 - **Email Verification:** 📧 Verify user identities through email.
 - **Password Reset:** 🔑 Streamline password resets by sending email password reset links.
-- **Lucia + tRPC:** 🔄 Similar to NextAuth with tRPC, granting access to sessions and user information through tRPC procedures.
+- **Auth + tRPC:** 🔄 Similar to NextAuth with tRPC, granting access to sessions and user information through tRPC procedures.
 - **E2E tests:** 🧪 Catch every issue before your users do with comprehensive E2E testing.
 - **Stripe Payment:** 💳 Setup user subscriptions seamlessly with stripe.
 - **Email template with react-email:** ✉️ Craft your email templates using React.
@@ -24,7 +20,6 @@ Lucia is less opinionated than NextAuth, offering greater flexibility for custom
 ## Tech Stack
 
 - [Next.js](https://nextjs.org)
-- [Lucia](https://lucia-auth.com/)
 - [tRPC](https://trpc.io)
 - [Drizzle ORM](https://orm.drizzle.team/)
 - [PostgreSQL](https://www.postgresql.org/)

drizzle.config.ts

@@ -1,8 +1,8 @@
-import { defineConfig } from "drizzle-kit";
 import { DATABASE_PREFIX } from "@/lib/constants";
+import { defineConfig } from "drizzle-kit";
 
 export default defineConfig({
-  schema: "./src/server/db/schema.ts",
+  schema: "./src/server/db/schema",
   out: "./drizzle",
   dialect: "postgresql",
   dbCredentials: {

package.json

@@ -18,64 +18,66 @@
   },
   "dependencies": {
     "@hookform/resolvers": "^3.9.0",
-    "@lucia-auth/adapter-drizzle": "1.0.7",
-    "@radix-ui/react-alert-dialog": "^1.1.1",
-    "@radix-ui/react-dialog": "^1.1.1",
-    "@radix-ui/react-dropdown-menu": "^2.1.1",
-    "@radix-ui/react-icons": "^1.3.0",
+    "@oslojs/crypto": "^1.0.1",
+    "@oslojs/encoding": "^1.1.0",
+    "@radix-ui/react-alert-dialog": "^1.1.4",
+    "@radix-ui/react-dialog": "^1.1.4",
+    "@radix-ui/react-dropdown-menu": "^2.1.4",
+    "@radix-ui/react-icons": "^1.3.2",
     "@radix-ui/react-label": "^2.1.0",
     "@radix-ui/react-slot": "^1.1.0",
     "@radix-ui/react-tabs": "^1.1.0",
-    "@react-email/components": "^0.0.12",
-    "@react-email/render": "^0.0.10",
+    "@react-email/components": "^0.0.31",
+    "@react-email/render": "^1.0.3",
     "@t3-oss/env-nextjs": "^0.7.3",
     "@tanstack/react-query": "^4.36.1",
     "@trpc/client": "^10.45.2",
     "@trpc/next": "^10.45.2",
     "@trpc/react-query": "^10.45.2",
     "@trpc/server": "^10.45.2",
     "arctic": "^1.9.2",
+    "bcryptjs": "^2.4.3",
     "class-variance-authority": "^0.7.0",
     "clsx": "^2.1.1",
-    "lucia": "3.2.0",
-    "next": "^14.2.5",
+    "drizzle-orm": "^0.38.3",
+    "nanoid": "^5.0.9",
+    "next": "^15.1.5",
     "next-themes": "^0.2.1",
     "nodemailer": "^6.9.14",
-    "oslo": "^1.2.1",
     "postgres": "^3.4.4",
-    "react": "18.2.0",
-    "react-dom": "18.2.0",
+    "react": "19.0.0",
+    "react-dom": "19.0.0",
     "react-hook-form": "^7.52.1",
     "react-markdown": "^9.0.1",
     "react-syntax-highlighter": "^15.5.0",
     "rehype-raw": "^7.0.0",
     "remark-gfm": "^4.0.0",
     "server-only": "^0.0.1",
-    "sonner": "^1.5.0",
+    "sonner": "^1.7.1",
     "stripe": "^14.25.0",
     "superjson": "^2.2.1",
     "tailwind-merge": "^2.4.0",
     "tailwindcss-animate": "^1.0.7",
-    "vaul": "^0.8.9",
+    "vaul": "^1.1.2",
     "zod": "^3.23.8"
   },
   "devDependencies": {
     "@next/eslint-plugin-next": "^14.2.5",
     "@playwright/test": "^1.45.3",
     "@tailwindcss/typography": "^0.5.13",
+    "@types/bcryptjs": "^2.4.6",
     "@types/eslint": "^8.56.11",
     "@types/node": "^18.19.42",
     "@types/nodemailer": "^6.4.15",
-    "@types/react": "^18.3.3",
-    "@types/react-dom": "^18.3.0",
+    "@types/react": "^19.0.3",
+    "@types/react-dom": "^19.0.2",
     "@types/react-syntax-highlighter": "^15.5.13",
     "@typescript-eslint/eslint-plugin": "^6.21.0",
     "@typescript-eslint/parser": "^6.21.0",
     "autoprefixer": "^10.4.19",
     "dotenv": "^16.4.5",
     "dotenv-cli": "^7.4.2",
-    "drizzle-kit": "^0.23.0",
-    "drizzle-orm": "^0.32.1",
+    "drizzle-kit": "^0.30.1",
     "eslint": "^8.57.0",
     "pg": "^8.12.0",
     "postcss": "^8.4.40",