keystone.ts

import { createAuth } from '@keystone-next/auth';
import 'dotenv/config';
import { User } from './schemas/User';
import { Product } from './schemas/Product';
import { ProductImage } from './schemas/ProductImage';
import { CartItem } from './schemas/CartItem';
import { OrderItem } from './schemas/OrderItem';
import { Order } from './schemas/Order';
import { Role } from './schemas/Role';
import { permissionsList } from './schemas/Fields';
import { config, list } from '@keystone-6/core';
import type {
  ListSchemaConfig,
  ServerConfig,
  DatabaseConfig,
  AdminUIConfig,
  SessionStrategy,
} from '@keystone-6/core/types';
import { statelessSessions } from '@keystone-next/keystone/session';
// import { insertSeedData } from './seed-data/index';
import { postgresql } from '@keystone-next/keystone/dist/declarations/src/types/filters';
import { extendGraphqlSchema } from './mutations';
import { sendPasswordResetEmail } from './lib/mail';


const databaseURL = process.env.DATABASE_URL || 'postgres://admin:adminpassword@localhost/brassmart';

const db = {
  provider: 'postgresql',
  url: databaseURL,
  onConnect: async context => {
    console.log(`Front-end URL: ${process.env.FRONTEND_URL}`);
    // console.log(context);
    // if (process.argv.includes('--seed-data')) {
    //   await insertSeedData(keystone);
    // }
  },
};

const sessionConfig = {
  maxAge: 60 * 60 * 24 * 30,
  secret: process.env.SESSION_SECRET,
  secure: true,
  sameSite: 'none',
} 

const { withAuth } = createAuth({
  listKey: 'User',
  identityField: 'email',
  secretField: 'password',
  initFirstItem: {
    fields: ['name', 'email', 'password'],
    // TODO: add in intial roles
  },
  sessionData: `id name email role { ${permissionsList.join(' ')} }`,
  passwordResetLink: {
    async sendToken(args) {
      await sendPasswordResetEmail(args.token, args.identity)
    },
  },
});

const lists = {
  User,
  Product,
  ProductImage,
  CartItem,
  OrderItem,
  Order,
  Role,
};

export default withAuth(
  config({
    server: {
      cors: {
        origin: [process.env.FRONTEND_URL],
        credentials: true,
      },
    },
    db,
    lists,
    extendGraphqlSchema,
    ui: {
      // TODO: change for roles
      isAccessAllowed: ({ session }) => !!session?.data
    },
    session: statelessSessions(sessionConfig)
  }),
);