Refresh token rotation support: add getAccountByUser and updateAccount to adapters

[nbifrye]

Goals

1. Allow accounts to be retrieved based on user ID
2. Allow accounts to be updated
3. By executing the above in the session callback, token rotation can be more easily implemented

Non-Goals

No response

Background

When implementing token rotation using the database strategy, the database must be manipulated directly.
As in the following example from the documentation:

const prisma = new PrismaClient()

export default Auth(new Request("https://example.com"), {
  adapter: PrismaAdapter(prisma),
  ...
  callbacks: {
    async session({ session, user }) {
      const [google] = await prisma.account.findMany({
        where: { userId: user.id, provider: "google" },
      })
      if (google.expires_at * 1000 < Date.now()) {
        // If the access token has expired, try to refresh it
        try {

          /* Get new access token */

          await prisma.account.update({
            data: {
              access_token: tokens.access_token,
              expires_at: Math.floor(Date.now() / 1000 + tokens.expires_in),
              refresh_token: tokens.refresh_token ?? google.refresh_token,
            },
            where: {
              provider_providerAccountId: {
                provider: "google",
                providerAccountId: google.providerAccountId,
              },
            },
          })
...
})

I think these operations should be able to be performed in abstraction via functions in the adapter.

Proposal

Add functions like getAccountByUser and updateAccount to the adapter. The user then no longer needs to directly manipulate the database client as follows:

const prisma = new PrismaClient()
const adapter = PrismaAdapter(prisma)

export default Auth(new Request("https://example.com"), {
  adapter,
  ...
  callbacks: {
    async session({ session, user }) {
      const google = await adapter.getAccountByUser({
        userId: user.id,
        provider: "google",
      })
      if (google.expires_at * 1000 < Date.now()) {
        // If the access token has expired, try to refresh it
        try {
        
          /* Get new access token */

          await adapter.updateAccount({
            userId: user.id,
            provider: "google",
            providerAccountId: google.providerAccountId,
            access_token: tokens.access_token,
            expires_at: Math.floor(Date.now() / 1000 + tokens.expires_in),
            refresh_token: tokens.refresh_token ?? google.refresh_token,
          })
        ...
})