Does not work with prod build

[bobbywarner]

Environment

Node v24.4.0
Nuxt 3.17.6

Reproduction

The issue is obvious, just attempt to build for production mode (pnpm run build). I noticed another person reporting the same issue on StackOverflow too:

https://stackoverflow.com/questions/79625796/why-is-sidebase-nuxt-auth-not-working-in-production-without-ssr

Describe the bug

We've used this library for over a year now without issues, but after trying to upgrade to nuxt-auth 1.0.0 (with next-auth 4.21.1 or 4.22.5) we've encountered an odd issue. Everything works fine in development (pnpm run dev), but nothing works when deployed (pnpm run build). There is nothing logged to the console or anything, just attempting to login or logout hangs indefinitely.

Additional context

No response

Logs

[phoenix-ru]

just attempting to login or logout hangs indefinitely.

I've done multiple attempts to reproduce the problem with both ssr: false and SSR on, dev/production, and in all cases I am unable to reproduce the issue.

---

About getServerSession, it would only return null in two cases:

• when you try to call it from inside an /api/auth endpoint (which is normally only handled by the module and you shouldn't add your routes there):

  nuxt-auth/src/runtime/server/services/authjs/nuxtAuthHandler.ts

  Lines 111 to 114 in 0088492

  	// avoid running auth middleware on auth middleware (see #186)
  	if (event.path && event.path.startsWith(authBasePathname)) {
  	return null
  	}

• or when /api/auth/session returned a non-object or an empty object:

  nuxt-auth/src/runtime/server/services/authjs/nuxtAuthHandler.ts

  Lines 145 to 149 in 0088492

  	if (isNonEmptyObject(session)) {
  	return session as Session
  	}
  	return null

Could you please dig into it and provide more information?

[jkoestinger]

Hi, I have the same issue, and I observed something interesting:

I had my navigation hanging in the following situation: I'm not authenticated and try to reach a protected page. When already authenticated I can navigate without issue. I tried to switch to a custom middleware because if it hangs on navigation (calling signIn(undefined) in a view works) I would say it's the culprit in my case. The custom middleware still hanged, until I switched to the callWithNuxt method instead of direct return (as mentioned here), then it worked like a charm.

The issue only happens when I run it using npm run build && npm run preview, not npm run dev

I'm not sure exactly why this happens, but it seems that if the signIn call is directly returned from the middleware, it is not awaited on (if I log the to.fullPath in the custom middleware, it prints the path I want to reach in a loop).

Environment

Nuxt: 3.16.2
Node: 20.19.4
Next auth: 4.21.1

[phoenix-ru]

Hi @jkoestinger, this is a good pointer. Have you checked if there are any similar issues inside Nuxt repo itself (https://github.com/nuxt/nuxt/)?

---

@bobbywarner or anyone else also experiencing the same issue:
Have you been able to find a culprit? What version did you upgrade from? We would really appreciate if you could test different commits to see at which exact point the problem arises. Here's how you can do it:

• Go to https://github.com/sidebase/nuxt-auth/commits/main/
• Find the release you had before (e.g. 0.10.0: 8d31537)
• Find the next release (e.g. 0.10.1 at 506f9b1) or a commit in-between (e.g. e62f677) you think might be a problem
• Install the commit by substituting the XXXXXX with the short commit SHA

# e.g. npm i https://pkg.pr.new/@sidebase/nuxt-auth@506f9b1
npm i https://pkg.pr.new/@sidebase/nuxt-auth@XXXXXX

• See if the problem occurs on this commit:
  • If no, go to the next release or commit;
  • If yes, is this the commit which introduced the problem? Test if any of the previous commits have the problem.

Please report the findings so that everyone can benefit from it.

[Moonlight63]

@phoenix-ru I will chime in that I am having a similar issue, but am having trouble tracking down why. I patched the signIn of useAuth with a bunch of console logs, and what I found is everything works perfectly fin in dev server, but loops endlessly in prod. I am also going to try a custom middleware.
Also, I can't seem to figure out why it is directing to the default /api/auth/signin path, when I specifically told it to redirect to my custom path.

AUTH_OPTIONS_PASSED {
  unauthenticatedOnly: false,
  navigateAuthenticatedTo: '/',
  navigateUnauthenticatedTo: '/account/login'
}
IS_GUEST_MODE false
IS_AUTHENTICATED false
STATUS unauthenticated
GLOBAL_APP_MIDDLEWARE true
MATCHED_ROUTE true
AUTH_CONFIG_PROVIDER_TYPE authjs
SIGN_IN_OPTIONS { error: 'SessionRequired', callbackUrl: '/account/profile' }
[nuxt-auth] signIn called {
  providerInitial: undefined,
  optionKeys: [ 'error', 'callbackUrl' ],
  hasAuthorizationParams: false
}
[nuxt-auth] signIn: fetching providers
[nuxt-auth] available providers [ 'google' ]
[nuxt-auth] defaulting provider { provider: '' }
[nuxt-auth] callbackUrl resolved { hasCallbackUrl: true, redirect: true }
[nuxt-auth] signIn: computed signin params { hasQueryParams: true }
[nuxt-auth] selected provider { provider: '', exists: false, type: undefined }
[nuxt-auth] provider not found - navigating to provider selection { url: '/api/auth/signin?callbackUrl=%2Faccount%2Fprofile' }
[nuxt-auth] navigateToAuthPage called {
  href: '/api/auth/signin?callbackUrl=%2Faccount%2Fprofile',
  isInternalRouting: true,
  isServer: true
}
[nuxt-auth] SSR navigation branch entered
[nuxt-auth] ssrContext present
[nuxt-auth] href protocol check { isExternalHost: false }
[nuxt-auth] computed redirect location {
  location: '/api/auth/signin?callbackUrl=%2Faccount%2Fprofile',
  isExternalHost: false,
  isInternalRouting: true
}
[nuxt-auth] encodeURL called {
  location: '/api/auth/signin?callbackUrl=%2Faccount%2Fprofile',
  isExternalHost: false
}
[nuxt-auth] encodeURL result (internal) { result: '/api/auth/signin?callbackUrl=%2Faccount%2Fprofile' }
[nuxt-auth] setting SSR _renderResponse {
  statusCode: 302,
  encodedLoc: '/api/auth/signin?callbackUrl=%2Faccount%2Fprofile',
  encodedHeader: '/api/auth/signin?callbackUrl=%2Faccount%2Fprofile'
}
[nuxt-auth] aborting navigation after setting SSR response
[nuxt-auth] signIn end (invalid provider) { elapsedMs: 3 }
AUTH_OPTIONS_PASSED {
  unauthenticatedOnly: false,
  navigateAuthenticatedTo: '/',
  navigateUnauthenticatedTo: '/account/login'
}
IS_GUEST_MODE false
IS_AUTHENTICATED false
STATUS unauthenticated
GLOBAL_APP_MIDDLEWARE true
MATCHED_ROUTE true
AUTH_CONFIG_PROVIDER_TYPE authjs
SIGN_IN_OPTIONS { error: 'SessionRequired', callbackUrl: '/account/profile' }
[nuxt-auth] signIn called {
  providerInitial: undefined,
  optionKeys: [ 'error', 'callbackUrl' ],
  hasAuthorizationParams: false
}
[nuxt-auth] signIn: fetching providers
[nuxt-auth] available providers [ 'google' ]
[nuxt-auth] defaulting provider { provider: '' }
[nuxt-auth] callbackUrl resolved { hasCallbackUrl: true, redirect: true }
[nuxt-auth] signIn: computed signin params { hasQueryParams: true }
[nuxt-auth] selected provider { provider: '', exists: false, type: undefined }
[nuxt-auth] provider not found - navigating to provider selection { url: '/api/auth/signin?callbackUrl=%2Faccount%2Fprofile' }
[nuxt-auth] navigateToAuthPage called {
  href: '/api/auth/signin?callbackUrl=%2Faccount%2Fprofile',
  isInternalRouting: true,
  isServer: true
}
[nuxt-auth] SSR navigation branch entered
[nuxt-auth] ssrContext present
[nuxt-auth] href protocol check { isExternalHost: false }
[nuxt-auth] computed redirect location {
  location: '/api/auth/signin?callbackUrl=%2Faccount%2Fprofile',
  isExternalHost: false,
  isInternalRouting: true
}
[nuxt-auth] encodeURL called {
  location: '/api/auth/signin?callbackUrl=%2Faccount%2Fprofile',
  isExternalHost: false
}
[nuxt-auth] encodeURL result (internal) { result: '/api/auth/signin?callbackUrl=%2Faccount%2Fprofile' }
[nuxt-auth] setting SSR _renderResponse {
  statusCode: 302,
  encodedLoc: '/api/auth/signin?callbackUrl=%2Faccount%2Fprofile',
  encodedHeader: '/api/auth/signin?callbackUrl=%2Faccount%2Fprofile'
}
[nuxt-auth] aborting navigation after setting SSR response
[nuxt-auth] signIn end (invalid provider) { elapsedMs: 4 }
AUTH_OPTIONS_PASSED {
  unauthenticatedOnly: false,
  navigateAuthenticatedTo: '/',
  navigateUnauthenticatedTo: '/account/login'
}

EDIT: Can confirm, patching the stock middleware with callWithNuxt (and making it async) does in fact fix the problem.

diff --git a/node_modules/@sidebase/nuxt-auth/dist/runtime/middleware/sidebase-auth.js b/node_modules/@sidebase/nuxt-auth/dist/runtime/middleware/sidebase-auth.js
-export default defineNuxtRouteMiddleware((to) => {
+import { useNuxtApp } from '#imports'
+import { callWithNuxt } from '#app/nuxt'
+export default defineNuxtRouteMiddleware(async (to) => {
+  const nuxtApp = useNuxtApp()
   const options = normalizeUserOptions(to.meta.auth);
+  console.log("AUTH_OPTIONS_PASSED", options)
   if (!options) {
  }

   if (authConfig.provider.type === "authjs") {
+    console.log("AUTH_CONFIG_PROVIDER_TYPE", authConfig.provider.type)
     const callbackUrl = determineCallbackUrlForRouteMiddleware(authConfig, to);
     const signInOptions = {
       error: "SessionRequired",
       callbackUrl
     };
-    return signIn(void 0, signInOptions);
+    console.log("SIGN_IN_OPTIONS", signInOptions)
+    await callWithNuxt(nuxtApp, signIn, [undefined, signInOptions]);
+    // return signIn(void 0, signInOptions);
   }

[phoenix-ru]

@Moonlight63 Thank you a lot for the good pointer to the cause of the issue, I've opened a PR with the fix: #1057