조금 헤맨 NextAuth 애플 소셜 로그인 apple login 구현기

// login.jsx
import { signIn, useSession } from 'next-auth/react';

const { data: session } = useSession();

<LoginButton onClick={() => signIn('apple')}>
	<AppleLogo />
	<LoginText>Apple로 로그인</LoginText>
</LoginButton>;

// app/api/auth/[...nextauth]/route.ts
import { createPrivateKey } from 'crypto';
import process from 'process';

import { SignJWT } from 'jose';
import NextAuth from 'next-auth';
import AppleProvider, { AppleProfile } from 'next-auth/providers/apple';

async function handler(req, res) {
	// AppleProvider clientSecret 토큰 생성
	const getAppleToken = async () => {
		const key = `-----BEGIN PRIVATE KEY-----\n${process.env.APPLE_PRIVATE_KEY}\n-----END PRIVATE KEY-----`;
		const appleToken = await new SignJWT({})
			.setAudience('https://appleid.apple.com')
			.setIssuer(process.env.APPLE_TEAM_ID!)
			.setIssuedAt(new Date().getTime() / 1000)
			.setExpirationTime(new Date().getTime() / 1000 + 3600 * 2)
			.setSubject(process.env.APPLE_ID!)
			.setProtectedHeader({
				alg: 'ES256',
				kid: process.env.APPLE_KEY_ID,
			})
			.sign(createPrivateKey(key));
		return appleToken;
	};

	return NextAuth(req, res, {
	  // 애플 로그인 시, 쿠키 필요함
		cookies: {
			pkceCodeVerifier: {
				name: 'next-auth.pkce.code_verifier',
				options: {
					httpOnly: true,
					sameSite: 'none',
					path: '/',
					secure: true,
				},
			},
		},
		providers: [
			AppleProvider({
				clientId: process.env.APPLE_ID!,
				clientSecret: await getAppleToken(),
				profile(profile: AppleProfile) {
					return {
						id: profile.sub,
						email: profile.email,
						from: 'apple',
					};
				},
			}),
		],
		callbacks: {
			async jwt({ token, user }) {
				return { ...token, ...user };
			},
			async session({ session, token }) {
				session.user = token as any;
				return session;
			},
		},
	});
}

export { handler as GET, handler as POST };