-
);
}
diff --git a/src/server/actions/groups.ts b/src/server/actions/groups.ts
new file mode 100644
index 0000000..ab118b7
--- /dev/null
+++ b/src/server/actions/groups.ts
@@ -0,0 +1,43 @@
+"use server";
+
+import { z } from "zod";
+import { redirect } from "next/navigation";
+
+import { auth } from "@/server/auth";
+import { prisma } from "@/server/db";
+
+const createGroupSchema = z.object({
+ name: z.string().trim().min(1).max(80),
+ slug: z
+ .string()
+ .trim()
+ .toLowerCase()
+ .regex(/^[a-z0-9-]+$/)
+ .min(2)
+ .max(40),
+});
+
+export async function createGroup(formData: FormData) {
+ const session = await auth();
+ if (!session?.user?.id) redirect("/login");
+
+ const data = createGroupSchema.parse({
+ name: formData.get("name"),
+ slug: formData.get("slug"),
+ });
+
+ const group = await prisma.group.create({
+ data: {
+ name: data.name,
+ slug: data.slug,
+ createdById: session.user.id,
+ members: {
+ create: { userId: session.user.id, role: "ADMIN" },
+ },
+ },
+ });
+
+ redirect(`/g/${group.slug}`);
+}
+
+
diff --git a/src/server/actions/invites.ts b/src/server/actions/invites.ts
new file mode 100644
index 0000000..7efe403
--- /dev/null
+++ b/src/server/actions/invites.ts
@@ -0,0 +1,61 @@
+"use server";
+
+import { z } from "zod";
+import { redirect } from "next/navigation";
+
+import { auth } from "@/server/auth";
+import { prisma } from "@/server/db";
+import { newInviteToken } from "@/server/invites";
+import { sendInviteEmail } from "@/server/email";
+
+const createInviteSchema = z.object({
+ groupSlug: z.string().min(1),
+ email: z.string().trim().toLowerCase().email(),
+ role: z.enum(["ADMIN", "MEMBER"]).default("MEMBER"),
+});
+
+export async function createInvite(formData: FormData) {
+ const session = await auth();
+ if (!session?.user?.id) redirect("/login");
+
+ const data = createInviteSchema.parse({
+ groupSlug: formData.get("groupSlug"),
+ email: formData.get("email"),
+ role: formData.get("role") ?? "MEMBER",
+ });
+
+ const membership = await prisma.groupMember.findFirst({
+ where: { userId: session.user.id, group: { slug: data.groupSlug } },
+ include: { group: true },
+ });
+ if (!membership || membership.role !== "ADMIN") {
+ throw new Error("Not authorized");
+ }
+
+ const { token, tokenHash } = newInviteToken();
+ const expiresAt = new Date(Date.now() + 1000 * 60 * 60 * 24 * 7); // 7 days
+
+ const invite = await prisma.invite.create({
+ data: {
+ groupId: membership.groupId,
+ email: data.email,
+ role: data.role,
+ tokenHash,
+ createdById: session.user.id,
+ expiresAt,
+ },
+ });
+
+ const baseUrl = process.env.AUTH_URL ?? "http://localhost:3000";
+ const inviteUrl = `${baseUrl}/invite/${token}`;
+
+ await sendInviteEmail({
+ to: data.email,
+ groupName: membership.group.name,
+ inviteUrl,
+ });
+
+ return { inviteId: invite.id, inviteUrl };
+}
+
+
diff --git a/src/server/auth.ts b/src/server/auth.ts
new file mode 100644
index 0000000..f12548e
--- /dev/null
+++ b/src/server/auth.ts
@@ -0,0 +1,45 @@
+import type { NextAuthOptions } from "next-auth";
+import NextAuth from "next-auth";
+import { getServerSession } from "next-auth";
+import EmailProvider from "next-auth/providers/email";
+import { PrismaAdapter } from "@next-auth/prisma-adapter";
+
+import { prisma } from "@/server/db";
+
+export const authOptions: NextAuthOptions = {
+ adapter: PrismaAdapter(prisma),
+ secret: process.env.AUTH_SECRET ?? process.env.NEXTAUTH_SECRET,
+ providers: [
+ EmailProvider({
+ from: process.env.EMAIL_FROM,
+ server: {
+ host: process.env.EMAIL_SERVER_HOST,
+ port: Number(process.env.EMAIL_SERVER_PORT ?? 587),
+ auth: process.env.EMAIL_SERVER_USER
+ ? {
+ user: process.env.EMAIL_SERVER_USER,
+ pass: process.env.EMAIL_SERVER_PASSWORD,
+ }
+ : undefined,
+ },
+ }),
+ ],
+ pages: {
+ signIn: "/login",
+ verifyRequest: "/login?check=1",
+ },
+ callbacks: {
+ async session({ session, user }) {
+ if (session.user) session.user.id = user.id;
+ return session;
+ },
+ },
+};
+
+export const nextAuthHandler = NextAuth(authOptions);
+
+export function auth() {
+ return getServerSession(authOptions);
+}
+
+
diff --git a/src/server/db.ts b/src/server/db.ts
new file mode 100644
index 0000000..f5b0203
--- /dev/null
+++ b/src/server/db.ts
@@ -0,0 +1,13 @@
+import { PrismaClient } from "@/generated/prisma";
+
+const globalForPrisma = globalThis as unknown as { prisma?: PrismaClient };
+
+export const prisma =
+ globalForPrisma.prisma ??
+ new PrismaClient({
+ log: process.env.NODE_ENV === "development" ? ["warn", "error"] : ["error"],
+ });
+
+if (process.env.NODE_ENV !== "production") globalForPrisma.prisma = prisma;
+
+
diff --git a/src/server/email.ts b/src/server/email.ts
new file mode 100644
index 0000000..41b415c
--- /dev/null
+++ b/src/server/email.ts
@@ -0,0 +1,39 @@
+import nodemailer from "nodemailer";
+
+export function getSmtpTransport() {
+ const host = process.env.EMAIL_SERVER_HOST;
+ const port = Number(process.env.EMAIL_SERVER_PORT ?? 587);
+ const user = process.env.EMAIL_SERVER_USER;
+ const pass = process.env.EMAIL_SERVER_PASSWORD;
+
+ if (!host) throw new Error("Missing EMAIL_SERVER_HOST");
+
+ return nodemailer.createTransport({
+ host,
+ port,
+ auth: user ? { user, pass } : undefined,
+ });
+}
+
+export async function sendInviteEmail(args: {
+ to: string;
+ groupName: string;
+ inviteUrl: string;
+}) {
+ const from = process.env.EMAIL_FROM;
+ if (!from) throw new Error("Missing EMAIL_FROM");
+
+ const transport = getSmtpTransport();
+
+ const subject = `MirrorMatch invite: ${args.groupName}`;
+ const text = `You were invited to join "${args.groupName}" on MirrorMatch.\n\nJoin: ${args.inviteUrl}\n\nIf you didn't expect this, you can ignore this email.\n`;
+
+ await transport.sendMail({
+ from,
+ to: args.to,
+ subject,
+ text,
+ });
+}
+
+
diff --git a/src/server/invites.ts b/src/server/invites.ts
new file mode 100644
index 0000000..a554bb8
--- /dev/null
+++ b/src/server/invites.ts
@@ -0,0 +1,10 @@
+import crypto from "crypto";
+
+export function newInviteToken() {
+ // URL-safe token
+ const token = crypto.randomBytes(32).toString("base64url");
+ const tokenHash = crypto.createHash("sha256").update(token).digest("hex");
+ return { token, tokenHash };
+}
+
+
diff --git a/src/types/next-auth.d.ts b/src/types/next-auth.d.ts
new file mode 100644
index 0000000..dd016e5
--- /dev/null
+++ b/src/types/next-auth.d.ts
@@ -0,0 +1,14 @@
+import "next-auth";
+
+declare module "next-auth" {
+ interface Session {
+ user?: {
+ id: string;
+ name?: string | null;
+ email?: string | null;
+ image?: string | null;
+ };
+ }
+}
+
+
- To get started, edit the page.tsx file. -
-
- Looking for a starting point or more instructions? Head over to{" "}
-
+
+ Invite-only photo guessing game. Create a set, upload photos, and see who can match the
+ names best once you reveal.
+
+
MirrorMatch
+
+ {session?.user ? (
+
- Templates
- {" "}
- or the{" "}
-
+ ) : (
+
- Learning
- {" "}
- center.
-
-
-
+ Sign in
+
+ )}
+
-
-
+