Callback hell (?)

When auth fails, it goes back to the site it was called from, and so we end up having something like http://localhost:3000/?callbackUrl=http://localhost:3000/?callbackUrl=http://localhost:3000/

and it will keep adding the callbackUrl again and again…

would you mind doing something to prevent this from happening?

thanks in advance

[balazsorban44]

Would you please share the full next-auth configuration and your / page?

[balazsorban44]

So it’s a bit hard to debug without a runnable reproduction, but your issue might be here:

  const handleSubmit = async (e) => {
    e.preventDefault();
    if (isForSignIn) {
      signIn('credentials', {
        email,
        password,
        callbackUrl: `${window.location.origin}/`, // <--
      });
    } 

You don’t really check if there is already a callbackUrl here. I also wonder if auth fails as you mention, shouldn’t there be an error query parameter as well in the URL?

I think there should be an error parameter, and so you should handle those cases appropriately since you defined a custom sign-in page. See the docs for possible error codes: https://next-auth.js.org/configuration/pages#sign-in-page

And here is the default sign-in page and error messages for reference:

https://github.com/nextauthjs/next-auth/blob/bcb9383aecaee490ba0c4979f3d0f5b0457924a3/src/server/pages/signin.js#L23-L36

(See the whole file for inspiration)

In any case, I am certain it is not a bug in next-auth, so I’ll transfer this to discussions. Feel free to ask further if you have more questions.