我使用Next.js (11.1.2) + NextAuth (4.0.0-beta.7)登录到Strapi中,只使用凭据提供程序(JWT)。
整个流程都与此[...nextauth].js
“工作”。
import NextAuth from "next-auth"
import CredentialsProvider from 'next-auth/providers/credentials'
export default NextAuth({
providers: [
CredentialsProvider({
name: 'AppName',
credentials: {
email: {label: "Email", type: "text", placeholder: "daveglow@foomail.com"},
password: { label: "Password", type: "password" },
},
async authorize(credentials, req) {
const res = await fetch(process.env.CREDENTIALS_AUTH_URL, {
method: 'POST',
body: JSON.stringify(credentials),
headers: { "Content-Type": "application/json" }
})
const user = await res.json()
if (res.ok && user) {
return user
}
return null
}
})
],
session: {
strategy: "jwt",
maxAge: 30 * 24 * 60 * 60 // 30 days
},
pages: {
signIn: '/signin',
signOut: '/signin',
error: '/signin'
},
})
但在用户登录几秒钟后,终端显示此消息并删除会话:
[next-auth][warn][NO_SECRET] https://next-auth.js.org/warnings#no_secret
[next-auth][error][JWT_SESSION_ERROR] https://next-auth.js.org/errors#jwt_session_error decryption operation failed {
message: 'decryption operation failed',
stack: 'JWEDecryptionFailed: decryption operation failed\n'
所以,我试着补充:
secret: process.env.SECRET, //I've created using $ openssl rand -base64 32
然后我收到两条不同的信息
浏览器控制台
[next-auth][error][CLIENT_FETCH_ERROR]
https://next-auth.js.org/errors#client_fetch_error
与代码终端
[next-auth][error][CALLBACK_CREDENTIALS_JWT_ERROR]
https://next-auth.js.org/errors#callback_credentials_jwt_error Signin in with credentials only supported if JWT strategy is enabled UnsupportedStrategy [UnsupportedStrategyError]: Signin in with credentials only supported if JWT strategy is enabled
我试过几种不同的选择,但这让我很困惑。现在,我不知道该怎么做。) :(你能帮我吗?
发布于 2021-12-02 09:45:24
我升级到4.0.1版。解决了这个问题。
发布于 2021-12-01 13:20:15
正如https://github.com/nextauthjs/next-auth/issues/3216中所讨论的,它可能是在beta 7版本下引入的一个bug。
发布于 2022-01-07 20:04:44
我不是专家。但我认为这是当前图书馆的一个问题,下一个4.0.0
我可以使用版本“next”:"^3.25.0“来解决这个问题。然后跟着这个教程
https://stackoverflow.com/questions/70174647
复制相似问题