feat: migrate from PocketBase to PostgreSQL with Drizzle ORM

- Add @project-e/db package with Drizzle schema and migrations - Replace PocketBase client with PostgreSQL-based database client - Migrate auth from custom to NextAuth.js - Add Docker Compose with PostgreSQL container - Update worker to use new database client - Remove PocketBase-specific files and migrations - Add drizzle config and initial migration
2026-07-24 07:08:29 -04:00
parent 6c438eab32
commit 73335484f8
42 changed files with 2895 additions and 2796 deletions
@@ -0,0 +1,52 @@
+import bcrypt from 'bcryptjs';
+import { count, eq } from 'drizzle-orm';
+import type { NextAuthOptions } from 'next-auth';
+import CredentialsProvider from 'next-auth/providers/credentials';
+import { db, users } from '@project-e/db';
+
+export const authOptions: NextAuthOptions = {
+  session: { strategy: 'jwt' },
+  providers: [
+    CredentialsProvider({
+      name: 'Credentials',
+      credentials: {
+        email: { label: 'Email', type: 'email' },
+        password: { label: 'Password', type: 'password' },
+      },
+      async authorize(credentials) {
+        const email = credentials?.email?.trim().toLowerCase();
+        const password = credentials?.password;
+        if (!email || !password) return null;
+
+        let [user] = await db.select().from(users).where(eq(users.email, email)).limit(1);
+
+        if (!user) {
+          const [{ total }] = await db.select({ total: count() }).from(users);
+          const initialEmail = process.env.INITIAL_ADMIN_EMAIL?.trim().toLowerCase();
+          const initialPassword = process.env.INITIAL_ADMIN_PASSWORD;
+          if (total === 0 && email === initialEmail && password === initialPassword) {
+            [user] = await db.insert(users).values({
+              email,
+              name: process.env.INITIAL_ADMIN_NAME || email,
+              passwordHash: await bcrypt.hash(password, 12),
+            }).returning();
+          }
+        }
+
+        if (!user || !(await bcrypt.compare(password, user.passwordHash))) return null;
+        return { id: user.id, email: user.email, name: user.name };
+      },
+    }),
+  ],
+  callbacks: {
+    jwt({ token, user }) {
+      if (user) token.id = user.id;
+      return token;
+    },
+    session({ session, token }) {
+      if (session.user) session.user.id = token.id as string;
+      return session;
+    },
+  },
+  pages: { signIn: '/login' },
+};