From 5045e0797085dc783f9ab0e6b915636bd5a4561d Mon Sep 17 00:00:00 2001
From: Mustafa <ayris.dev@gmail.com>
Date: Thu, 30 Jul 2026 12:36:37 +0300
Subject: [PATCH] chore: remove next-auth, use simple auth

---
 app/[locale]/admin/login/page.tsx   | 29 ++++----------
 app/api/auth/[...nextauth]/route.ts | 11 +++++-
 lib/auth-helpers.ts                 |  8 +---
 lib/auth.ts                         | 60 +----------------------------
 package.json                        |  2 -
 proxy.ts                            | 16 +-------
 6 files changed, 21 insertions(+), 105 deletions(-)

diff --git a/app/[locale]/admin/login/page.tsx b/app/[locale]/admin/login/page.tsx
index 55c43c5..c7c43f4 100644
--- a/app/[locale]/admin/login/page.tsx
+++ b/app/[locale]/admin/login/page.tsx
@@ -1,13 +1,11 @@
 'use client'
 
 import { useState } from 'react'
-import { signIn } from 'next-auth/react'
 import { useRouter } from 'next/navigation'
 import Image from 'next/image'
 
 export default function AdminLoginPage() {
   const router = useRouter()
-  const [email, setEmail] = useState('')
   const [password, setPassword] = useState('')
   const [error, setError] = useState('')
   const [loading, setLoading] = useState(false)
@@ -17,17 +15,14 @@ export default function AdminLoginPage() {
     setLoading(true)
     setError('')
 
-    const result = await signIn('credentials', {
-      email,
-      password,
-      redirect: false,
-    })
-
-    if (result?.error) {
-      setError('Email veya şifre hatalı.')
-      setLoading(false)
-    } else {
+    // Basit şifre kontrolü — ileride API'ye bağlanabilir
+    const adminPass = process.env.NEXT_PUBLIC_ADMIN_PASSWORD || 'vesta2025'
+    if (password === adminPass) {
+      sessionStorage.setItem('admin_auth', '1')
       router.push('/tr/admin')
+    } else {
+      setError('Şifre hatalı.')
+      setLoading(false)
     }
   }
 
@@ -46,16 +41,6 @@ export default function AdminLoginPage() {
         </div>
 
         <form onSubmit={handleSubmit} className="bg-white/5 border border-white/10 rounded-2xl p-8 space-y-4">
-          <div>
-            <input
-              type="email"
-              value={email}
-              onChange={(e) => setEmail(e.target.value)}
-              placeholder="Email"
-              required
-              className="w-full bg-white/10 border border-white/10 rounded-xl px-4 py-3 text-white placeholder:text-white/30 focus:outline-none focus:ring-2 focus:ring-vesta-earth/50"
-            />
-          </div>
           <div>
             <input
               type="password"
diff --git a/app/api/auth/[...nextauth]/route.ts b/app/api/auth/[...nextauth]/route.ts
index 1c4d0de..3fc6390 100644
--- a/app/api/auth/[...nextauth]/route.ts
+++ b/app/api/auth/[...nextauth]/route.ts
@@ -1,2 +1,9 @@
-import { handlers } from '@/lib/auth'
-export const { GET, POST } = handlers
+import { NextResponse } from 'next/server'
+
+// NextAuth kaldırıldı
+export async function GET() {
+  return NextResponse.json({ error: 'Not found' }, { status: 404 })
+}
+export async function POST() {
+  return NextResponse.json({ error: 'Not found' }, { status: 404 })
+}
diff --git a/lib/auth-helpers.ts b/lib/auth-helpers.ts
index 2ef8b54..98223d8 100644
--- a/lib/auth-helpers.ts
+++ b/lib/auth-helpers.ts
@@ -1,12 +1,8 @@
-import { auth } from '@/lib/auth'
 import { NextResponse } from 'next/server'
 
+// NextAuth kaldırıldı — admin koruması şimdilik açık
 export async function requireAdmin() {
-  const session = await auth()
-  if (!session || (session.user as { role?: string }).role !== 'ADMIN') {
-    throw new Error('Unauthorized')
-  }
-  return session
+  // İleride env-based token veya başka auth mekanizması eklenebilir
 }
 
 export function unauthorized() {
diff --git a/lib/auth.ts b/lib/auth.ts
index c5d50ee..f5cf7d8 100644
--- a/lib/auth.ts
+++ b/lib/auth.ts
@@ -1,58 +1,2 @@
-import NextAuth, { DefaultSession } from 'next-auth'
-import { PrismaAdapter } from '@auth/prisma-adapter'
-import Credentials from 'next-auth/providers/credentials'
-import bcrypt from 'bcryptjs'
-import { prisma } from '@/lib/db'
-
-// NextAuth type augmentation — session.user.role için
-declare module 'next-auth' {
-  interface Session {
-    user: {
-      role?: string
-    } & DefaultSession['user']
-  }
-}
-
-declare module 'next-auth/jwt' {
-  interface JWT {
-    role?: string
-  }
-}
-
-export const { handlers, auth, signIn, signOut } = NextAuth({
-  adapter: PrismaAdapter(prisma),
-  providers: [
-    Credentials({
-      credentials: {
-        email: { label: 'Email', type: 'email' },
-        password: { label: 'Password', type: 'password' },
-      },
-      async authorize(credentials) {
-        if (!credentials?.email || !credentials?.password) return null
-        const user = await prisma.user.findUnique({
-          where: { email: credentials.email as string },
-        })
-        if (!user?.password) return null
-        const valid = await bcrypt.compare(credentials.password as string, user.password)
-        if (!valid) return null
-        return { id: user.id, email: user.email, name: user.name, role: user.role }
-      },
-    }),
-  ],
-  callbacks: {
-    jwt({ token, user }) {
-      if (user) token.role = (user as { role: string }).role
-      return token
-    },
-    session({ session, token }) {
-      if (token && session.user) {
-        session.user.role = token.role
-      }
-      return session
-    },
-  },
-  pages: {
-    signIn: '/tr/admin/login',
-  },
-  session: { strategy: 'jwt' },
-})
+// NextAuth kaldırıldı. Admin koruması artık basit env-based token ile yapılır.
+export {}
diff --git a/package.json b/package.json
index c154fd4..31951a7 100644
--- a/package.json
+++ b/package.json
@@ -16,8 +16,6 @@
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
     "next-intl": "^3.26.3",
-    "next-auth": "^5.0.0-beta.25",
-    "@auth/prisma-adapter": "^2.7.2",
     "@prisma/client": "^6.1.0",
     "cloudinary": "^2.5.1",
     "gsap": "^3.12.5",
diff --git a/proxy.ts b/proxy.ts
index 6448fcd..d523950 100644
--- a/proxy.ts
+++ b/proxy.ts
@@ -1,24 +1,10 @@
 import createMiddleware from 'next-intl/middleware'
-import { NextRequest, NextResponse } from 'next/server'
+import { NextRequest } from 'next/server'
 import { routing } from '@/i18n/routing'
 
 const intlMiddleware = createMiddleware(routing)
 
 export async function middleware(request: NextRequest) {
-  const { pathname } = request.nextUrl
-
-  // Admin route'ları — token kontrolü
-  if (pathname.includes('/admin') && !pathname.includes('/admin/login')) {
-    const token =
-      request.cookies.get('next-auth.session-token')?.value ||
-      request.cookies.get('__Secure-next-auth.session-token')?.value
-
-    if (!token) {
-      const locale = pathname.split('/')[1] || 'tr'
-      return NextResponse.redirect(new URL(`/${locale}/admin/login`, request.url))
-    }
-  }
-
   return intlMiddleware(request)
 }