NextAuth is complete crap. I’m so happy to be done with it. It’s one of the most difficult libraries I’ve ever tried to extend. The expose very little to the end user. I also think it’s overused for sites that only need simple authentication methods. Adds a ton of bloat for no reason.


If your site has sensitive data stored on it then you should be using an authentication provider anyway or you better do it in house and have a good security team.