Custom Providers.Credentials - how to set/save tokens?

[sean2gh]

Question 💬

I wanted to create a completely custom sign in and signup flow and components using amazon Cognito as the auth provider so I am using signIn("AWS_COGNITO_MANUAL", credentials) but it isn't setting the refreshToken, idToken or accessToken when I return the cognitoUser. How do I go about doing this?

This

async jwt(token, user, account, profile, isNewUser) {
      console.log("----TOKEN----");
      console.log(token);
      console.log(user);
      }
      return token;
},

prints my CognitoUser object for user but for token it prints:

{ name: undefined, email: undefined, picture: undefined, sub: undefined }

My config looks like this:

How to reproduce ☕️

const providers = [
  Providers.Cognito({
    clientId: process.env.COGNITO_CLIENT_ID,
    clientSecret: process.env.COGNITO_CLIENT_SECRET,
    domain: process.env.COGNITO_DOMAIN,
  }),
  Providers.Credentials({
    id: "AWS_COGNITO_MANUAL",  
    name: "AWS_COGNITO_MANUAL",
    type: "oauth",
    version: "2.0",
    credentials: {
      username: { label: "Email", type: "email" },
      password: { label: "Password", type: "password" },
    },
    async authorize(credentials, req) {
      const { email, password } = credentials;
      try {
        const cognitoUser = await Auth.signIn(email, password);
        return cognitoUser;
      } catch (e) {
        console.log(e);
        return null;
      }
    },
    async profile(profile, tokens) {
      const userAttributes = await Auth.userAttributes(profile);
      console.log(userAttributes);
      return userAttributes;
    },
  }),
];

export default NextAuth({
  session: {
    jwt: true,
    maxAge: 30 * 24 * 60 * 60, // 30 days
  },
  providers,
  callbacks: {
    async signIn(user, account, profile) {
      console.log("----SIGNIN----");
      console.log(account);
      console.log(profile);
      const isAllowedToSignIn = true;
      if (isAllowedToSignIn) {
        return true;
      } else {
        // Return false to display a default error message
        return false;
        // Or you can return a URL to redirect to:
        // return '/unauthorized'
      }
    },
    async redirect(url, baseUrl) {
      console.log("----REDIRECT----");
      console.log(url);
      console.log(baseUrl);
      return baseUrl;
    },
    async session(session, user) {
      console.log("---SESSION----");
      console.log(session);
      console.log(user);
      return session;
    },
  async jwt(token, user, account, profile, isNewUser) {
        console.log("----TOKEN----");
        console.log(token);
        console.log(user);
        }
        return token;
      },
  },
});

Contributing 🙌🏽

Yes, I am willing to help answer this question in a PR

[balazsorban44]

check the docs https://next-auth.js.org/configuration/callbacks#jwt-callback

you have more than token available in the first invocation (signin) of the jwt callback. check the other params. account will have those values