mobile support for client review player3

auth.config.ts

@@ -0,0 +1,35 @@
+import type { NextAuthConfig } from "next-auth";
+import type { Role } from "@prisma/client";
+
+/**
+ * Edge-safe auth config — no Prisma, no bcryptjs.
+ * Used by middleware (Edge Runtime) for JWT verification only.
+ * The full auth config (with Credentials provider + Prisma adapter) lives in auth.ts.
+ */
+export const authConfig: NextAuthConfig = {
+  session: { strategy: "jwt" },
+  pages: {
+    signIn: "/login",
+  },
+  callbacks: {
+    async jwt({ token, user }) {
+      if (user) {
+        token.id = user.id;
+        token.role = (user as { role: Role }).role;
+        token.mustChangePassword =
+          (user as { mustChangePassword?: boolean }).mustChangePassword ?? false;
+      }
+      return token;
+    },
+    async session({ session, token }) {
+      if (token && session.user) {
+        session.user.id = token.id as string;
+        session.user.role = token.role as Role;
+        session.user.mustChangePassword = token.mustChangePassword as boolean;
+      }
+      return session;
+    },
+  },
+  // No providers here — Credentials provider (bcryptjs) only in auth.ts
+  providers: [],
+};