feat: integrate authentication and password management features, including bcrypt for hashing and NextAuth for session handling

lib/auth-utils.ts

@@ -0,0 +1,21 @@
+import { getServerSession } from "next-auth";
+import { authOptions } from "@/lib/auth";
+import { NextResponse } from "next/server";
+
+/**
+ * Verify that the user is authenticated
+ * Returns null if authenticated, or a NextResponse with 401 if not
+ */
+export async function requireAuth(): Promise<NextResponse | null> {
+  const session = await getServerSession(authOptions);
+  
+  if (!session) {
+    return NextResponse.json(
+      { error: "Non authentifié" },
+      { status: 401 }
+    );
+  }
+  
+  return null;
+}
+

lib/auth.ts

@@ -0,0 +1,72 @@
+import { NextAuthOptions } from "next-auth";
+import CredentialsProvider from "next-auth/providers/credentials";
+import { authService } from "@/services/auth.service";
+
+// Get secret with fallback for development
+const secret = process.env.NEXTAUTH_SECRET || "dev-secret-key-change-in-production";
+
+// Debug: log secret status (remove in production)
+if (process.env.NODE_ENV === "development") {
+  console.log("🔐 NextAuth secret:", process.env.NEXTAUTH_SECRET ? "✅ Loaded from .env.local" : "⚠️ Using fallback");
+}
+
+if (!process.env.NEXTAUTH_SECRET && process.env.NODE_ENV === "production") {
+  throw new Error(
+    "NEXTAUTH_SECRET is required in production. Please set it in your environment variables."
+  );
+}
+
+export const authOptions: NextAuthOptions = {
+  providers: [
+    CredentialsProvider({
+      name: "Credentials",
+      credentials: {
+        password: { label: "Mot de passe", type: "password" },
+      },
+      async authorize(credentials) {
+        try {
+          if (!credentials?.password) {
+            return null;
+          }
+
+          const isValid = await authService.verifyPassword(credentials.password);
+          if (!isValid) {
+            return null;
+          }
+
+          // Return a user object (we don't need a real user, just authentication)
+          return {
+            id: "admin",
+            email: "admin@local",
+          };
+        } catch (error) {
+          console.error("Error in authorize:", error);
+          return null;
+        }
+      },
+    }),
+  ],
+  pages: {
+    signIn: "/login",
+  },
+  session: {
+    strategy: "jwt",
+    maxAge: 30 * 24 * 60 * 60, // 30 days
+  },
+  callbacks: {
+    async jwt({ token, user }) {
+      if (user) {
+        token.id = user.id;
+      }
+      return token;
+    },
+    async session({ session, token }) {
+      if (session.user && token.id) {
+        session.user.id = token.id;
+      }
+      return session;
+    },
+  },
+  secret,
+};
+