backend-auth-js

Auth.js provides OAuth provider integration, credentials login, and session management for Next.js 14+ App Router apps. Install next-auth and @auth/prisma-adapter, configure providers (GitHub, Google, Discord) and a Prisma adapter in your auth route, set environment variables for provider credentials and AUTH_SECRET, then use Auth.js middleware and session hooks throughout your app.

Yes. Auth.js includes a Prisma adapter that handles session and user persistence automatically. Configure the adapter in your NextAuth instance, define the required Prisma schema models, and Auth.js manages session creation, validation, and cleanup without manual database queries.

JWT sessions store encrypted tokens client-side with no server database lookup, reducing latency and scaling easily. Database sessions store sessions server-side via a Prisma adapter, offering revocation, real-time updates, and session control but requiring database queries on each request.

Auth.js supports Next.js serverless and edge deployments natively. Use JWT sessions for stateless edge functions, or database sessions with Prisma for serverless functions that can reach your database. Configure AUTH_SECRET and provider credentials as environment variables for both deployment contexts.

Create OAuth apps in GitHub and Google Developer Console to obtain client IDs and secrets. Set AUTH_GITHUB_ID, AUTH_GITHUB_SECRET, AUTH_GOOGLE_ID, and AUTH_GOOGLE_SECRET as environment variables. Add GitHub and Google providers to your Auth.js configuration with minimal setup—Auth.js handles the OAuth flow, CSRF protection, and token exchange.

Auth.js supports credentials authentication for username/password login with custom verification logic, email/passwordless sign-in, and social providers. Use the credentials provider to implement custom authentication logic while Auth.js handles session creation, CSRF protection, and integration with your Next.js App Router.