fixed a bit

app/api/auth/[...nextauth]/route.js

@@ -0,0 +1,55 @@
+// app/api/auth/[...nextauth]/route.js
+import NextAuth from 'next-auth';
+import CredentialsProvider from 'next-auth/providers/credentials';
+import { validateCredentials } from '../../../actions/auth';
+
+export const authOptions = {
+    providers: [
+        CredentialsProvider({
+            name: 'Credentials',
+            credentials: {
+                username: { label: "Username", type: "text" },
+                password: { label: "Password", type: "password" }
+            },
+            async authorize(credentials) {
+                if (!credentials?.username || !credentials?.password) {
+                    return null;
+                }
+
+                const user = await validateCredentials(
+                    credentials.username,
+                    credentials.password
+                );
+
+                return user;
+            }
+        })
+    ],
+    callbacks: {
+        async jwt({ token, user }) {
+            if (user) {
+                token.id = user.id;
+                token.role = user.role;
+                token.username = user.username;
+            }
+            return token;
+        },
+        async session({ session, token }) {
+            if (token) {
+                session.user.id = token.id;
+                session.user.role = token.role;
+                session.user.username = token.username;
+            }
+            return session;
+        }
+    },
+    pages: {
+        signIn: '/login',
+    },
+    session: {
+        strategy: "jwt",
+    }
+};
+
+const handler = NextAuth(authOptions);
+export { handler as GET, handler as POST };

app/api/auth/[nextuath].js

@@ -1,38 +0,0 @@
-import NextAuth from 'next-auth';
-import Providers from 'next-auth/providers';
-import bcrypt from 'bcryptjs';
-import { query } from '../../../lib/db';
-
-export default NextAuth({
-    providers: [
-        Providers.Credentials({
-            name: 'Credentials',
-            credentials: {
-                username: { label: 'Username', type: 'text' },
-                password: { label: 'Password', type: 'password' },
-            },
-            authorize: async (credentials) => {
-                const user = await query('SELECT * FROM users WHERE username = ?', [credentials.username]);
-                if (user && bcrypt.compareSync(credentials.password, user.password)) {
-                    return { id: user.id, name: user.username, role: user.role };
-                }
-                return null;
-            },
-        }),
-    ],
-    callbacks: {
-        jwt: async (token, user) => {
-            if (user) {
-                token.role = user.role;
-            }
-            return token;
-        },
-        session: async (session, token) => {
-            session.user.role = token.role;
-            return session;
-        },
-    },
-    pages: {
-        signIn: '/login', // Redirect to the login page
-    },
-});

app/api/user/route.js

@@ -0,0 +1,17 @@
+// app/api/user/route.js
+import { getServerSession } from 'next-auth/next';
+import { authOptions } from '../auth/[...nextauth]/route';
+
+export async function GET() {
+    const session = await getServerSession(authOptions);
+
+    if (!session) {
+        return Response.json({ error: 'Unauthorized' }, { status: 401 });
+    }
+
+    return Response.json({
+        id: session.user.id,
+        username: session.user.username,
+        role: session.user.role
+    });
+}