Auth.js Session Management

[MoalosiLiteboho]

I'm experiencing an issue with NextAuth.js session management in my Next.js application. The integration with my Spring Boot OAuth2 server seems to work correctly, as the login page from the OAuth2 server appears, and I can successfully enter user credentials. After logging in, I'm redirected back to my Next.js application at the / route. However, the session status does not get authenticated, and the session callback (session({ session, token })) is not being triggered.

auth-action.ts

"use server"

import {signIn} from "@/auth";

async function login() {
    await signIn(
        "springboot",
        {
            redirectTo: "/dashboard"
        }
    );
}

export { login }

auth.js

import NextAuth from "next-auth";

export const { auth, handlers, signIn, signOut } = NextAuth({
    providers: [
        {
            id: "springboot",
            name: "Spring Boot",
            type: "oauth",
            clientId: "next-js-client",
            clientSecret: "secret",
            issuer: "https://localhost:8443",
            wellKnown: "https://localhost:8443/.well-known/openid-configuration",
            authorization: {
                url: "https://localhost:8443/oauth2/authorize",
                params: {
                    scope: "openid profile"
                }
            },
            token: "https://localhost:8443/oauth2/token",
            userinfo: {
                url: "https://localhost:8443/userinfo"
            },
            client: {
                token_endpoint_auth_method: "client_secret_basic"
            },
            checks: ["none"],
        }
    ],
    session: {
        strategy: "jwt",
        maxAge: 2592000
    },
    trustHost: true,
    useSecureCookies: true,
    secret: "pLjyblA24MQea2NCbzijc3SH+LUQ0oBPRx4qzkqPN/w=",
    callbacks: {
        jwt({ token, account }) {
            if(account) {
                token.name = account?.providerAccountId
                token.email = account?.providerAccountId;
                token.exp = account?.expires_at;
                token.sub = account?.providerAccountId;
                token.jti = account?.id_token;
                token.access_token = account?.access_token;
                token.refresh_token = account?.refresh_token;
                console.log(token)
            }

            return token
        },
        session({ session, token }) {
            console.log("session starting...")
            session.user.id = token.id as string;
            return session
        },
    },
});

package.json

{
  "name": "web-frontend",
  "type": "module",
  "version": "0.1.0",
  "private": true,
  "scripts": {
    "dev": "next dev --turbopack",
    "build": "next build",
    "start": "next start",
    "lint": "next lint"
  },
  "dependencies": {
    "@heroui/react": "^2.7.6-beta.2",
    "@tanstack/react-query": "^5.71.10",
    "framer-motion": "^12.6.3",
    "jwt-decode": "^4.0.0",
    "next": "15.2.4",
    "next-auth": "^5.0.0-beta.25",
    "next-themes": "^0.4.6",
    "react": "^19.0.0",
    "react-dom": "^19.0.0",
    "react-icons": "^5.5.0"
  },
  "devDependencies": {
    "@eslint/eslintrc": "^3",
    "@tailwindcss/postcss": "^4",
    "@types/node": "^20",
    "@types/react": "^19",
    "@types/react-dom": "^19",
    "eslint": "^9",
    "eslint-config-next": "15.2.4",
    "tailwindcss": "^4",
    "typescript": "^5"
  }
}

my spring boot oauth2 server .well-known/openid-configuration

{
  "issuer": "https://localhost:8443",
  "authorization_endpoint": "https://localhost:8443/oauth2/authorize",
  "device_authorization_endpoint": "https://localhost:8443/oauth2/device_authorization",
  "token_endpoint": "https://localhost:8443/oauth2/token",
  "token_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "client_secret_jwt",
    "private_key_jwt",
    "tls_client_auth",
    "self_signed_tls_client_auth"
  ],
  "jwks_uri": "https://localhost:8443/oauth2/jwks",
  "userinfo_endpoint": "https://localhost:8443/userinfo",
  "end_session_endpoint": "https://localhost:8443/connect/logout",
  "response_types_supported": [
    "code"
  ],
  "grant_types_supported": [
    "authorization_code",
    "client_credentials",
    "refresh_token",
    "urn:ietf:params:oauth:grant-type:device_code",
    "urn:ietf:params:oauth:grant-type:token-exchange"
  ],
  "revocation_endpoint": "https://localhost:8443/oauth2/revoke",
  "revocation_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "client_secret_jwt",
    "private_key_jwt",
    "tls_client_auth",
    "self_signed_tls_client_auth"
  ],
  "introspection_endpoint": "https://localhost:8443/oauth2/introspect",
  "introspection_endpoint_auth_methods_supported": [
    "client_secret_basic",
    "client_secret_post",
    "client_secret_jwt",
    "private_key_jwt",
    "tls_client_auth",
    "self_signed_tls_client_auth"
  ],
  "code_challenge_methods_supported": [
    "S256"
  ],
  "tls_client_certificate_bound_access_tokens": true,
  "subject_types_supported": [
    "public"
  ],
  "id_token_signing_alg_values_supported": [
    "RS256"
  ],
  "scopes_supported": [
    "openid"
  ]
}

layout.tsx

import "@/style/globals.css";
import {ReactNode} from "react";
import type { Metadata } from "next";
import {SessionProvider} from "next-auth/react";
import HeroUiProvider from "@/components/providers/hero-ui-provider";
import Footer from "@/components/ui/footer/footer";
import TanStackProvider from "@/components/providers/tanstack-provider";

export const metadata: Metadata = {
    title: "web-app",
    description: "",
};

type RootLayoutProps = Readonly<{
    children: ReactNode;
}>

export default function RootLayout({children}: RootLayoutProps) {
    return (
        <html
            suppressHydrationWarning
            lang="en"
        >
            <body className="antialiased">
                <SessionProvider>
                    <TanStackProvider>
                        <HeroUiProvider>
                            {children}
                            <Footer />
                        </HeroUiProvider>
                    </TanStackProvider>
                </SessionProvider>
            </body>
        </html>
    );
}

front-end web logs

 ✓ Compiled /login in 2.8s
 GET /api/auth/session 200 in 3757ms
 GET /login 200 in 4162ms
 POST /login 303 in 63ms
{
  name: '[email protected]',
  email: '[email protected]',
  picture: undefined,
  sub: '[email protected]',
  exp: 1744191925,
  jti: 'eyJraWQiOiIwM2ZlY2Q1OS1lZWM4LTRlYjUtYmQ2ZS1mY2Y5YzFiYzE4YjIiLCJhbGciOiJSUzI1NiJ9.eyJzdWIiOiJhZG1pbkBnbWFpbC5jb20iLCJhdWQiOiJuZXh0LWpzLWNsaWVudCIsImF6cCI6Im5leHQtanMtY2xpZW50IiwiYXV0aF90aW1lIjoxNzQ0MTg4MjYwLCJpc3MiOiJodHRwczovL2xvY2FsaG9zdDo4NDQzIiwiZXhwIjoxNzQ0MTkzNDI2LCJpYXQiOjE3NDQxOTE2MjYsImp0aSI6ImY0MGI4NGVlLTMyZDctNGUyZS1iNWE2LWMzYjAyYjBmZTJjYyIsInNpZCI6InNwV2lKa1RyZzRVYVR2RzdqX0JISS0wZkxsNEVKdElKOHVsQ2FPN1JYQ3MifQ.O4aUlDoif7dYGkK3cnUMXxQvKoiSpJkO3WV7bFxD-pE9EKB-0dN2SGMYd0WBVZgm42222WnVGq3qRjjs7mBHXsZh8x7682u8BbhMvYIFi-MNzUJoABy__nglxf7uIFlXxNoq9P7Ggl4eOodIj2fvP2y7HsqMISdYW0kRUAxPeP9mvwWejsLWIPuiwNEu4tOITwTgJ6kKocpqntG5nPuESOm4uxfkaauYplxSutZFfugXzx-lMyGlcVlKR4D0I5G32bFXCM7UYeFpr2Irmsbdjuoq5BdIqBwawViFsnsaAnNy5phKrtsKT82VD8JSQqSpc3yEsiPt29C-1mzONCrfXw',
  access_token: 'eyJraWQiOiIwM2ZlY2Q1OS1lZWM4LTRlYjUtYmQ2ZS1mY2Y5YzFiYzE4YjIiLCJhbGciOiJSUzI1NiJ9.eyJzdWIiOiJhZG1pbkBnbWFpbC5jb20iLCJhdWQiOiJuZXh0LWpzLWNsaWVudCIsIm5iZiI6MTc0NDE5MTYyNiwic2NvcGUiOlsib3BlbmlkIiwicHJvZmlsZSJdLCJpc3MiOiJodHRwczovL2xvY2FsaG9zdDo4NDQzIiwiZXhwIjoxNzQ0MTkxOTI2LCJpYXQiOjE3NDQxOTE2MjYsImp0aSI6Ijg1MzZlNjcyLTE2NjQtNDNlZS05MzdjLWMyM2NlMDkwOTExYyJ9.QFatP3tkoC6PmfurXIyfHikCqFNr_XyYAT5og3MpWzhjU3xLw1Loi8VmKrrxpAQj7WGdEV4jOJ0de8XNjb4WyaoTMBgXiEmDQ5bWN2OTxA-pl7XPfA-X8nutjtjKB9ESj5uqT6m3y7rrE7IV6siLvw2Zru6rGLdzYBvWHUnRcGIg0MtjseDh83_DWdccvI7mprCsw7WCEW2g9dGXz2Hq-72CvvpJ_XPdIAbPdy0XrLWV4aDsmqbc0s-hHpqIce2P9NduqHHqsX5KnfNphTaWgk9hKnZc1hze52TcHse3IZDIHYErrvK41ZTjlYQnq6KKcHVuHYBTqRmy_sRterW_PA',
  refresh_token: 'HL3cKnml4ij2pEWQ0WSwbBl0I0AqoTxck0Dng9I_fGcbDDMUuAcdiyLfsT7dAzzoZCdShHc1vZZEY2teiWzL5U8DMX9zZFCBhbA3dlFwUzxdqMt0i1Rxasq71XFXeuCo'
}
 GET /api/auth/callback/springboot?code=pEdrtrtIEnXYU9-Q34cmDLl22oB4Fq0pKDa8LQNONQp3QoGXAyP_mchs9z1xKFJyRlmDjN5sUtbpYvdHjbA87mwWWyB-tnfIypLn-9gmKBw6vwuSd0sViT7P-f6fYXra 302 in 1474ms
loading
 GET / 200 in 339ms
 GET /api/auth/session 200 in 101ms
 GET /api/auth/session 200 in 147ms