The Ultimate Guide to Next Auth - Everything You Need

[@erickugel1376]

WOW THANK YOU this really really helped it was super clear and easy to follow

[@brettwestwooddeveloper]

Thank you so much! I am glad you were able to follow my teachings easily! Thanks for tuning in and the donation!

[@adammo6661]

Maaaan this literally saved my life. I was struggling to get both credentials with next auth working, but it does now. THANK YOU SOOOO MUCH

[@joe25x]

One of the best tutorials I have seen on KZbin, you explained everything perfectly and in detail, looking forward to your next videos!

[@brettwestwooddeveloper]

Thank you so much for the kind words!

[@eshw23]

Just found your channel and subscribed, i like how your tutorials are long and in depth about concepts to understand instead of just project tutorials, and i dont think 10 or 15 minute short videos can do the same.

[@brettwestwooddeveloper]

Welcome aboard!

[@codewithsam7300]

I am telling you this seriously. I have watched 20+ videos on KZbin about the same. All the time things didn`t worked out. But today i completed your video and trust me on this, your tutorial is the best tutorial in the whole world. Just wanted to say you thank You friend............

[@brettwestwooddeveloper]

Thank you so much! Glad I could help you out

[@hamzahahmad1670]

Hey Brett, I wanted to thank you for the very comprehensive video. Authentication is always a messy topic, and it's very appreciable how you explained not only credentials but also social login. Thanks again

[@brettwestwooddeveloper]

Thank you so much for the kind comment!

[@gbani_d]

You're an amazing teacher, and this is premium content. The way you explain every step makes it feel like a one on one class. Thank you!

[@brettwestwooddeveloper]

Thank you so much!

[@briandacallos4234]

You don't have no idea how much i need this, thank you. Clear and concise

[@brettwestwooddeveloper]

No problem, glad I could help you!

[@rafin_rahman]

the most comprehensive NextAuth tutorial, well done Brett!

[@brettwestwooddeveloper]

Thank you so much!

[@phil5293]

Wow. Great video. I had to go through it twice to get everything right (I used typescript)

[@pablopenia]

I did this hundred of times, but this is the first time I actually understand how it works. Thanks! you're a great teacher.

[@brettwestwooddeveloper]

Awesome! Thank you! and no problem!

[@shumit]

Simply FABULOUS !!! THANK YOU SO VERY MUCH !!! I followed along. Perfect. You showed every nitty-gritty, were not too fast, not too slow, did not switch screens/windows suddenly (which confuses us, the beginners), were describing what you were doing, where you were doing, and why you were doing. Once more, THANK YOU !!!

[@brettwestwooddeveloper]

Thank you so much for the kind words and tuning in!

[@carafachera4781]

Wow I just happily spend 5 hours watching and rewatching this video and I learned a lot. I don't know why I enjoyed some much. Thank Brett, you just earn a new loyal suscriber❤

[@brettwestwooddeveloper]

Thank you so much! I am glad you learned a lot!

[@harshwardhanmore5877]

you just saved my final year project man!!!! Thank You 1000 times

[@brettwestwooddeveloper]

No problem! Glad I could help you out!

[@hadirahal5403]

Your channel deserves more attention! 10/10 explanation!

[@brettwestwooddeveloper]

Thank you!

[@aubreyocallaghan4539]

Very useful. Appreciated showing both server and client auth

[@brettwestwooddeveloper]

No problem!

[@ahasiakopian9696]

Thank you for the video! When registering, you need to block the form submit button after clicking, since you can spam the button and there will be many identical users in the database, you also need to add a check on the server when creating. Also, do not add your .env file to the repository. Now you have data that other users can use for authorization, be careful

[@rod6722]

Curious why you didn't use the session model? As is suggested in the Next Auth docs on the Prisma adapter.

[@brettwestwooddeveloper]

Should have for tutorial purpose. But either way is fine. Definitely recommend using the adapter.

[@ronokoushique7434]

@@brettwestwooddeveloper I don't understand why it's not working automatically when I am using the adapter. Should I have to change anything for the session table to get populated automatically? plz help

[@sahaneakanayaka3394]

The best tutorial I found so far about Next 13 authentication. Everything was explained clear. Thank you so much ...🙏😍😍

[@brettwestwooddeveloper]

Thank you! You are welcome!

[@isaachatilima]

My search is over. Thank you Brett, great session

[@brettwestwooddeveloper]

Thank you!

[@waqaskhandev]

Really Awesome walk through for the Next Auth. Learned alot. Thanks

[@brettwestwooddeveloper]

No problem! Thanks for tuning in!

[@mubashirwaheed474]

Thanks you so much for this video. Can you please make video on role based authentication?

[@brettwestwooddeveloper]

No problem! And yes I can take a look into that, so something like admin login, user login, etc? protecting routes?

[@mubashirwaheed474]

@@brettwestwooddeveloper I have come across simple role based authentication videos but not ultimate guide per say. Role based authentication of user and admin using mongodb, prisma and next-auth. The major point of learning can be how to secure pages and then give access to certain routes only to the admin . For example: home and dashboard should be a protected route but only admin can access the dashboard.

[@adrianhansa7018]

Great tutorial, Brett! I am glad I found your channel. Thanks!

[@brettwestwooddeveloper]

Awesome, thank you!

[@BBocho]

Thank you very much, there are very few tutorials like this one implementing auth with the App Router, and it works perfectly fine!

[@brettwestwooddeveloper]

Thank you! Glad I can help!

[@raymondmichael4987]

Was scratching my head for this, using both credentials and social medias. Dude you just killed it, watched from zero to last seconds. Time to fight with TS into it 😊 Thanks buddy, thanks a lot ❤ Greetings from Tanzania 🇹🇿

[@brettwestwooddeveloper]

No problem! Thanks for tuning in!

[@joshuaekeh3775]

Thanks Brett. Your tutorial is quite easy to follow. You've made very simple.

[@mattburgess5697]

This is a great and very helpful video, going through several different ways of logging in a user. Just one thing though… it’s not Prism. It’s very clearly PrisMA.

[@brettwestwooddeveloper]

Thanks!

[@mahmoua07]

This is a great explanation of next-auth , thank you brother.

[@brettwestwooddeveloper]

You are welcome!

[@jamesnelson174]

Honestly, this guy is dope. I love this tutorial. ❤❤

[@brettwestwooddeveloper]

Thank you!

[@semajroyam3725]

this is what I've been looking for after the update of nextjs, now i can implement this to my capstone project, thank you for this tutorial!

[@brettwestwooddeveloper]

Glad I can help!

[@Shubham-yc6nz]

Best video on Internet. The latest greatest. I was bit confused about implementation using app/ directory thanks!!!

[@brettwestwooddeveloper]

Thank you so much for the compliment!

[@kathirmldata7411]

crystal clear explanation. easily understanding even for non English speaking country. thanks man. more love from india

[@brettwestwooddeveloper]

Thank you! I am glad I can help! Thanks for the support

[@CaseStudyQB]

Great video. Great job explaining each step and also showing how the network side of things looks in the browser console/tools. Thanks so much! I just subscribed!

[@mbaochachigozie1785]

By far the best nextAuth tut

[@brettwestwooddeveloper]

Thank you!

[@mayukhhazari7820]

Incredible brother 🙌🙌

[@brettwestwooddeveloper]

Thank you!

[@henrymunoz2035]

Love it great work, thank you so much

[@brettwestwooddeveloper]

You are welcome! Thanks for tuning in!

[@tworzymy_historie]

I think this is what i need to be mid after almost 2 yers of commercial work and more years hobby coding ;) Ty!

[@diamondpro2093]

Hey, love the videos. They are really helpful and concise. I was wondering if you could possibly make a video on what changes would have to be made to the application when its being pushed into production (i.e. changing specific environment variables, etc)

[@KkrDs97]

This is Exactly what i am looking for and great explanation from you, Thank you.

[@brettwestwooddeveloper]

No problem! Glad I could help!

[@chriseski]

Like and subscription earned as deserved! Thank you Brett, awesome tutorial!

[@brettwestwooddeveloper]

Thank you for the sub!

[@7harux]

one of the best tutorials I've seen

[@brettwestwooddeveloper]

Thank you so much!

[@abhask01]

watching after 1 year but thanks bro learned a lot

[@Leesdjo]

Very detailed video. Thank you so much.

[@kamilwitek8434]

Hi Brett, why on folder name u put [...nextauth] - in js that is the way to copy array but don't understand why do we name like that folder

[@brettwestwooddeveloper]

it's called a catch all route when named like that. This allows you to run multiple API requests from that folder

[@goldmikanik8274]

Thank you for the explanation, just a question please, when user register he actually doesn't get auth cookies, he needs to signin after that to get them right? If yes, is there a way to tweak that, would be nice if user can register and start using his dashboard for example. Thank you again.

[@huyphamminh6911]

i have a question, when you log in, next auth give you 3 tokens (next auth handled it), but how about when you sign up, you sent back user object via json, so we cant get the session when you sign up right

[@codePerfect]

Loved the tutorial

[@brettwestwooddeveloper]

Thank you!

[@chesscom-z1o]

Good job sir really impressive content. Thank you very much for sharing. 1. On a purely cosmetic side, in the login page, instead of the h1 "Sign into Github below" , I would rather change the button label to "Sign into Github". Same goes true for Google. 2. Are you planning to add a "reset forgotten passwords" functionality, since this is the "Ultimate" guide ? Best regards.

[@movocode]

Thank you for the tutorial.

[@brettwestwooddeveloper]

You are welcome!

[@sguitas]

This helped me a lot, thanks. Very clear explanation

[@brettwestwooddeveloper]

Glad I could help!

[@owenwijaya108]

this is fucking gold, you earned an instant subscriber!

[@brettwestwooddeveloper]

Thanks for the sub! Appreciate it!

[@owenwijaya108]

@@brettwestwooddeveloper don't even mention it, you greatly deserved it bruh

[@devsspace1918]

Thank you for sharing this insightful video.

[@brettwestwooddeveloper]

No Problem!

[@yongsujeong7870]

This is the best tutorials I have seen on KZbin Awesome! Could you tell me the reason why we need to add "/test" url at the end of the DATABASE_URL? Thank YOu!!

[@brettwestwooddeveloper]

thank you for the compliment and technically you can have whatever name you what instead of test. This will be your collection name in mongodb

[@yongsujeong7870]

@@brettwestwooddeveloper Really appreciate your answer!! Have a wonderful day!!!!😄😄

[@leviathanxid]

Thankyou so much sir ,this video is really helped me

[@brettwestwooddeveloper]

No problem! Thank you for watching my video! Don't forget to hit that subscribe!

[@AlfredLotsu]

this is so sick bro thank you

[@brettwestwooddeveloper]

No problem!

[@mediacreatif]

In the async authorize(credentials) function, I would fetch an API login. It's more clear for me. There is an API to register and there is an API to login.

[@Jerac07]

Great tutorial!!! One of the best I've seen. Quick question : How would you make an admin account that would see all other account is some sort of table?

[@brettwestwooddeveloper]

thank you! and you would have to create a custom value for admin signups through the login functionality. I would have to look into it more, and when I get good with it I can create a video on that topic. That is a very good topic that would be helpful!

[@Jerac07]

@@brettwestwooddeveloper thank you alot. That would be super helpfull. Keep up the good work and all the best from Zagreb, Croatia!

[@ekchills6948]

You're the best thank you ❤️

[@brettwestwooddeveloper]

You are welcome!

[@ekchills6948]

@@brettwestwooddeveloper i just finished and its really alot of information to digest, especially the way the google and github user is added to the database )): but overall I loved it

[@bengraham1798]

Thank you 🙏

[@brettwestwooddeveloper]

You are welcome!

[@samuelpalacios9661]

Hey Brett, amazing tutorial, one question, why you dind't use the Session model that next-auth provides as a starter code for prisma schema? (I guess its because that if we use jwt, the sessions will not be saved on the db)

[@younkezenger8117]

As a beginner, I am also struggling on understanding the difference between this two models. Need some help to understand why choose one or another

[@samuelpalacios9661]

@@younkezenger8117 Session only is used when you implement google/github auth options, so instead of only creating a user you also create a session. Hope this helps

[@TBDfilesLalit_kalyan]

thankyou so much for this tutorial ......kaap doing

[@ozgursar5386]

Thank you for the nicely structured and detailed tutorial. I just couldn't understand how the signin to OAuth providers created the Account and User documents in mongodb.

[@brettwestwooddeveloper]

My most recent videos go more in depth about session data/object. I would recommend console logging profile, user, session and all to see what data you get back

[@Dhanushsaji]

I think for protected route we should use middleware page

[@brettwestwooddeveloper]

Yes ideally you should, but you can use it on individual pages as well if you want per the documentation.

[@jenniferjohnston9236]

great tutorial! you should do one of these with next-auth-sanity

[@brettwestwooddeveloper]

Great suggestion! Only tried sanity once

[@mryoung205]

i loved this ... and i added next auth to my project. but i still dont know how to protect a sever side page... i am getting error in my seversideprops

[@lostinthenarrativve]

Hey man, which of these videos should I watch first, this or the one that's titled "Nextauth credentials provider" ?

[@brettwestwooddeveloper]

I would watch this one first because it goes over everything. There is a new version of Next-Auth which is in beta. However, you can still use this video as a guide and is still relevant. I have other videos as well on my channel going over the session object and much more!

[@R6videos6R]

Wow, you resolved my problem. Anywhere in the documentation was the error handling with the callback.ok and callback.error

[@ahmetsakrak]

It's a truly informative and well-made video. I still have two lingering questions. First, what difference does it make in the underlying operation of Next Auth if we don't specify 'jwt' as a strategy? Second, why didn't you touch upon the topic of Middleware? It's crucial for user experience.

[@0zankurt]

Could you please make a video for laravel sanctum version of this?

[@brettwestwooddeveloper]

Hi, sorry I have never used that

[@MrKeliv]

I love your video. I want to ask about protect the page with user has not been authenticated ? How to do that ? Thank you

[@brettwestwooddeveloper]

Thank you and you just have to create a middleware file on the root of the whole project. export { default } from "next-auth/middleware" export const config = { matcher: ["/dashboard"] } This protects the dashboard page

[@MrKeliv]

@@brettwestwooddeveloper Ok thank you. I already watch in another video. It has two option server side or client side. Glad to watch your video and help

[@Adrian-mu8gg]

did i miss where the app is going to handle resetting password for credential provider? do you hv a tutorial on how to do that, and to assign role?

[@Mike-ks7nr]

at 25:41 when i try to sign in it gives me an error. Says: "Sign in failed. Check the details you provided are correct." But in inspector it has 302 Found

[@brettwestwooddeveloper]

I would need more information to help you out there

[@merumeruedit]

Ty for your good tut i have a question what plugin you use that show auto complete before coding?

[@brettwestwooddeveloper]

Thanks and its called github copilot

[@p.durgashankar4464]

Best explanation.

[@brettwestwooddeveloper]

Thank you!

[@jesustzinon]

If is not too much to ask, can you expand these series of videos of auth by adding password recover and normal and admin user roles?

[@brettwestwooddeveloper]

Yes I can do that, I already have recent videos on next auth jwt session

[@chris-zlrr]

great content 👌🏼

[@nobody2937]

Thank you very much... Thank you ...

[@asithathennakoon3431]

Keep up the good work bro..

[@brettwestwooddeveloper]

Thank you!

[@daniyalfarooq998]

why cant i get fields other than name , email in the session? i tried returning user object with a field of Contact from [...nextauth] page too. but it is not carried into home page. btw Thanks for such a comprehensive tut. :)

[@brettwestwooddeveloper]

Thank you for tuning in, and by default you only get the name and email in the session. You must use the JWT strategy and then pass the data through the jwt to the session using asyn callbacks. I have a video on this: kzbin.info/www/bejne/mJy4noFvia2SnrM

[@daniyalfarooq998]

i have been using this procedure for some apps but now i have been facing an issue. The signup with google isnt working directly in api/auth/signup unless i remove the // adapter: PrismaAdapter(prisma) line in nextauth route. The signin with google isnt working at all from the login page in (site) folder. If there are any changes we should do then itll be really great because i have tried alot of stuff but nothing worked out for me. Youre a great teacher :)@@brettwestwooddeveloper

[@codingcambodia]

Do you have a video using next-auth and role base access control,. Like basic , admin ... ?

[@brettwestwooddeveloper]

no i do not

[@madanmalhotra]

Our next PM will be 👉👉Brett 👏

[@silviojava96]

Great tutorial, but i'm getting this error: Error parsing attribute "@default": The current connector does not support the `auto()` function.

[@brettwestwooddeveloper]

I would need more information on the code to help you out there

[@SingleSeeker]

what about the get refresh token strategy?

[@basics-school]

Very good video..But dont we need to store the session in db?

[@brettwestwooddeveloper]

don't think so, would have to get back with you on that

[@17Kpa]

If I need to bring me the user id and the roles, how would I do it? Great Video !

[@fadilarfat4974]

can you make a continuation video of this to deploy, i got a trouble to deploy it all of the authentication is not working after i deploy it

[@johndeer8405]

Hi, can you do a really short video showing us how to setup a DELETE api route handler with and without prisma or at least with prisma. The new way in next13(app) is a bit confusing. Thanks for the content!

[@brettwestwooddeveloper]

Yes I can start working on it

[@johndeer8405]

@@brettwestwooddeveloper thanks Brett, you are appreciated.

[@lamechamalisrael]

Unfortunately, this isn't EVERYTHING I need. What I need now is to know why the adapters work in the development environment. But when I upload it to AWS Amplify, I cannot use the JWT to sign in any longer.

[@dhavalbhimani1952]

Bro great video but I want to learn more about middleware stuff with google provider. Please help with that

[@rdrudra1628]

Theme Name Please?

[@brettwestwooddeveloper]

for my text editor?

[@israelebonko4176]

How do you configure Google Auth for a production project @all

[@brettwestwooddeveloper]

What do you mean by production project @all?

[@israelebonko4176]

@@brettwestwooddeveloper Thank you very much. I'm building a personal project solo. And your video has been very helpful in setting up an auth system. My issue is that I have my nextjs project live now on vercel with a domain name. And I'm confused because I don't know what to set as the authorized redirect url. localhost:3000 or my new domain name. Do we need to click "publish app" for live projects on oauth consent screen?

[@hardrockwebdevelopers3383]

Thanks!!! 😁

[@brettwestwooddeveloper]

No problem!

[@fixesdev]

Hi, nice video btw! Im very thankfull! One doubt, in the object of useSession i am not receiving and status key? is there a reason for that?

[@fixesdev]

nevermind, i got it!

[@reynaldobocaling4200]

Please another tuts about next js with typescript, thankyou brother❤

[@StartNight-df3sv]

Excellent tutorial. Unfortunately its not completed without JWT token option. Btw, you must modify your system environment for KZbin tutorials. I mean your display resolution must not exceed 1080 HD Now all your screen texts are very tiny and makes a lot of eye strain.

[@prashlovessamosa]

Thanks man

[@brettwestwooddeveloper]

You are welcome!

[@hafsahussein2016]

is there any way to prompt the custom errors in the register router? because something went wrong doesn't make sense, the user wants to know what is wrong.

[@mediacreatif]

For security purpose, you should not return the hashed password in the API register code. Just return the name and the email.

[@brettwestwooddeveloper]

correct

[@xouteiro0330]

Thank you for the great video, it helped a lot, but I have a problem regarding google auth, when I log in with google the first time and log out, the next time i try to login with google it automatically logs in with that account, it doesnt let the user choose another one I already tried a lot of things and nothing seems to work Thanks a lot again, great video!!

[@brettwestwooddeveloper]

did you sign out?

[@xouteiro0330]

Yes, and when I sign in again with google it doesnt let me choose another account

[@asfnobambu]

How this setup creates private routes only reachable by authenticated users ?

[@brettwestwooddeveloper]

At the end of the video I show how to set up authenticated routes. But there is other ways to show routes to paying customers only!