Reapply "refactor: migrate auth and utility api routes to app router (#1408)" (#1409)

This reverts commit a054efe.

Author: clintonlunn

src/app/api/auth/[...nextauth]/authOptions.ts

@@ -2,8 +2,8 @@ import axios from 'axios'
 import type { NextAuthOptions } from 'next-auth'
 import Auth0Provider from 'next-auth/providers/auth0'
 
-import { AUTH_CONFIG_SERVER } from '../../../../Config'
-import { IUserMetadata, UserRole } from '../../../../js/types/User'
+import { AUTH_CONFIG_SERVER } from '@/Config'
+import { IUserMetadata, UserRole } from '@/js/types/User'
 import { initializeUserInDB } from '@/js/auth/initializeUserInDb'
 
 const CustomClaimsNS = 'https://tacos.openbeta.io/'

src/pages/api/auth/logout.ts src/app/api/auth/logout/route.tssrc/pages/api/auth/logout.ts renamed to src/app/api/auth/logout/route.ts

@@ -3,19 +3,19 @@
  * However, it does not actually log out of auth0. Therefore, after logging out and then in the user will automatically be logged in again.
  * The default user experience here could be ok for providers such as facebook/google/etc but we want users to be able to log in with another account.
  */
-import { NextApiHandler } from 'next'
+import { NextRequest, NextResponse } from 'next/server'
 
 const auth0Domain = process.env.AUTH0_DOMAIN ?? ''
 const auth0ClientId = process.env.AUTH0_CLIENT_ID ?? ''
 
-const handler: NextApiHandler = (req, res): void => {
+export async function GET (req: NextRequest): Promise<NextResponse> {
   const clientIdParam = `client_id=${auth0ClientId}`
-  if (req.headers.referer == null) {
-    res.redirect(`${auth0Domain}/v2/logout?${clientIdParam}`)
+  const referer = req.headers.get('referer')
+
+  if (referer == null) {
+    return NextResponse.redirect(`${auth0Domain}/v2/logout?${clientIdParam}`)
   } else {
-    const returnTo = new URL(req.headers.referer).origin
-    res.redirect(`${auth0Domain}/v2/logout?returnTo=${encodeURIComponent(returnTo)}&${clientIdParam}`)
+    const returnTo = new URL(referer).origin
+    return NextResponse.redirect(`${auth0Domain}/v2/logout?returnTo=${encodeURIComponent(returnTo)}&${clientIdParam}`)
   }
 }
-
-export default handler

src/app/api/revalidate/route.ts

@@ -0,0 +1,39 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { revalidatePath } from 'next/cache'
+import { withUserAuth } from '@/js/auth/withUserAuth'
+import { checkUsername } from '@/js/utils'
+
+/**
+ * Notify backend to regenerate a page.
+ * @see https://nextjs.org/docs/app/building-your-application/data-fetching/incremental-static-regeneration
+ */
+const handler = async (req: NextRequest): Promise<NextResponse> => {
+  try {
+    const username = req.nextUrl.searchParams.get('u')
+    const page = req.nextUrl.searchParams.get('page')
+
+    let revalidated = false
+
+    // Handle user profile revalidation
+    if (username != null && checkUsername(username)) {
+      revalidatePath(`/u/${encodeURIComponent(username)}`)
+      revalidated = true
+    }
+
+    // Handle other pages revalidation
+    const ALLOWS = ['/edit']
+    if (page != null && ALLOWS.includes(page)) {
+      revalidatePath(page)
+      revalidated = true
+    }
+
+    return NextResponse.json({ revalidated })
+  } catch (e) {
+    return NextResponse.json(
+      { error: 'Error revalidating page' },
+      { status: 500 }
+    )
+  }
+}
+
+export const GET = withUserAuth(handler)

src/app/api/user/emailVerification/route.ts

@@ -0,0 +1,42 @@
+import { NextRequest, NextResponse } from 'next/server'
+import * as jose from 'jose'
+import { AUTH_CONFIG_SERVER } from '@/Config'
+import { sendEmailVerification } from '@/js/auth/ManagementClient'
+
+if (AUTH_CONFIG_SERVER == null) throw new Error('AUTH_CONFIG_SERVER not defined')
+
+const { nextauthSecret } = AUTH_CONFIG_SERVER
+
+/**
+ * JWT-verify 'session_token' from Auth0 postLogin action. The userId to request new email verification
+ * is in the JWT payload. We want to make sure the token really comes from Auth0.
+ * - GET: verify only
+ * - POST: verify and send a verification email for the user.
+ * @param endpoint /api/user/emailVerification?token=<Auth0 session_token>
+ */
+const verify = async (req: NextRequest): Promise<any> => {
+  const jwt = req.nextUrl.searchParams.get('token')
+  if (jwt != null) {
+    return await jose.jwtVerify(jwt, Buffer.from(nextauthSecret))
+  }
+}
+
+export async function GET (req: NextRequest): Promise<NextResponse> {
+  try {
+    await verify(req)
+    return new NextResponse(null, { status: 200 })
+  } catch {
+    return new NextResponse(null, { status: 503 })
+  }
+}
+
+export async function POST (req: NextRequest): Promise<NextResponse> {
+  try {
+    const token = await verify(req)
+    const auth0UserId = token.payload.sub
+    await sendEmailVerification(auth0UserId)
+    return new NextResponse(null, { status: 200 })
+  } catch {
+    return new NextResponse(null, { status: 503 })
+  }
+}

src/pages/api/legacyInvalidateClimbCache.ts

@@ -41,6 +41,9 @@
       ],
       "@/public/*": [
         "../public/*"
+      ],
+      "@/*": [
+        "*"
       ]
     },
     "plugins": [