Add Auth Endpoints

// src/pages/api/auth/login.ts

import type { NextApiRequest, NextApiResponse } from 'next';
import { wristbandAuth } from 'src/wristband';

// Login Endpoint
export default async function loginEndpoint(req: NextApiRequest, res: NextApiResponse) {
  if (req.method !== 'GET') {
    res.status(405).end();
    return;
  }

  // Call the Wristband login() method which will return a URL that should
  // be used to redirect to Wristband's hosted login page.
  const authorizeUrl = await wristbandAuth.pagesRouter.login(req, res);
  res.redirect(authorizeUrl);
}

// src/pages/api/auth/callback.ts

import type { NextApiRequest, NextApiResponse } from 'next';
import { getSession, wristbandAuth } from 'src/wristband';

// Callback Endpoint
export default async function callbackEndpoint(req: NextApiRequest, res: NextApiResponse) {
  if (req.method !== 'GET') {
    res.status(405).end();
    return;
  }

  // Call the Wristband callback() method to check if the user
  // successfully authenticated.  If the user did authenticate successfully, 
  // the user's tokens and claims can be retrieved from the CallbackResult.
  const callbackResult = await wristbandAuth.pagesRouter.callback(req, res);
  const { callbackData, redirectUrl, type } = callbackResult;

  if (type === 'redirect_required') {
    res.redirect(redirectUrl);
    return;
  }

  // Create a session for the authenticated user. If needed, custom fields can 
  // be stored in the session using the customFields parameter of the 
  // fromCallback() method.
  const session = await getSession(req, res);
  session.fromCallback(callbackData);
  await session.save();

  // Once the Callback Endpoint has completed,  we redirect to your app's
  // default return URL (typically your app's home page) or to an explicit
  // return URL, if one was specified in the original login request.
  res.redirect(callbackData.returnUrl || '<replace_with_a_default_return_url>');
}

// src/pages/api/auth/logout.ts

import type { NextApiRequest, NextApiResponse } from 'next';
import { getSession, wristbandAuth } from 'src/wristband';

// Logout Endpoint
export default async function logoutEndpoint(req: NextApiRequest, res: NextApiResponse) {
  if (req.method !== 'GET') {
    res.status(405).end();
    return;
  }

  // Get all the necessary session data needed to perform the logout operation.
  const session = await getSession(req, res);
  const logoutConfig = {
    refreshToken: session.refreshToken,
    tenantName: session.tenantName,
  };

  // Clear your application's local session.
  session.destroy();

  // Call the Wristband logout() function and use the returned URL to redirect
  // to Wristband's Logout Endpoint.  This will delete Wristband's session 
  // that is associated to the authenticated user.  When Wristband is done
  // logging out the user it will redirect back to your application's login 
  // URL or to the explicitly provided redirect URL.
  const wristbandLogoutUrl = await wristbandAuth.pagesRouter.logout(req, res, logoutConfig);
  res.redirect(wristbandLogoutUrl);
}

// src/pages/api/auth/session.ts

import type { NextApiRequest, NextApiResponse } from 'next';
import { getSession } from 'src/wristband';

// Session Endpoint
export default async function sessionEndpoint(req: NextApiRequest, res: NextApiResponse) {
  if (req.method !== 'GET') {
    res.status(405).end();
    return;
  }

  // Call the getSessionResponse() method to extract the user's 
  // session data and populate a SessionResponse. If needed, you can add 
  // additional data to the SessionResponse by using the metadata parameter 
  // of the getSessionResponse() method.
  const session = await getSession(req, res);
  const sessionResponse = session.getSessionResponse({ email: session.email });
  
  // The session response should never be cached by the browser.
  res.setHeader('Cache-Control', 'no-store');
  res.setHeader('Pragma', 'no-cache');
  res.status(200).json(sessionResponse);
}