来自子域的 NextAuth getSession 不起作用

Question

我正在构建一个提供不同应用程序的平台，主平台在 http://localhost 上运行，应用程序将在特定子域上运行，目前我有一个应用程序在http://sub.localhost上运行。

I am using Nginx and Docker to host both the platform and the application, my goal would be to authenticate on http://localhost and use the session of the platform in the applications (subdomains), I have already taken a look at every single来源/类似问题但找不到解决方案，我读过的一些来源如下：

• https://github.com/nextauthjs/next-auth/discussions/1299
• https://github.com/nextauthjs/next-auth/issues/405
• https://github.com/nextauthjs/next-auth/issues/2718

目前这是主平台上的 my.env.local：

NODE_ENV=development
GOOGLE_CLIENT_ID=...
GOOGLE_CLIENT_SECRET=...
GOOGLE_AUTH_URL=...
NEXTAUTH_URL=http://localhost/
NEXTAUTH_URL_INTERNAL=http://mygames:3000/
NEXTAUTH_SECRET=...
DATABASE_URL=...
NEXT_PUBLIC_API_KEY=...
NEXT_SECRET_API_KEY=...

以下是应用程序（子域）的.env.local：

NEXTAUTH_URL=http://sub.localhost/
NEXTAUTH_URL_INTERNAL=http://mygames:3000/
NEXTAUTH_SECRET=...
DATABASE_URL=...
NEXT_PUBLIC_API_KEY=...
NEXT_SECRET_API_KEY=...

以下是我的主平台的 [...nextauth].js：

import NextAuth from 'next-auth';
import GoogleProvider from 'next-auth/providers/google';
import { PrismaAdapter } from '@next-auth/prisma-adapter';
import prisma from '../../../lib/prisma';
import Stripe from 'stripe';

const getDomainWithoutSubdomain = url => {
  const urlParts = new URL(url).hostname.split('.');

  return urlParts
      .slice(0)
      .slice(-(urlParts.length === 4 ? 3 : 2))
      .join('.');
};

const hostName = getDomainWithoutSubdomain(process.env.NEXTAUTH_URL);

console.log("HOSTNAME", hostName);

const options = {
  secret: process.env.NEXTAUTH_SECRET,
  adapter: PrismaAdapter(prisma),
  providers: [
    GoogleProvider({
      clientId: process.env.GOOGLE_CLIENT_ID,
      clientSecret: process.env.GOOGLE_CLIENT_SECRET,
    }),
  ],
  pages: {
    signIn: '/signin'
  },
  callbacks: {
    async signIn({ user, account, profile, email, credentials }) {
      return true;
    },
    async redirect({ url, baseUrl }) {
      return baseUrl;
    },
    async session({ session, user, token }) {
      return { ...session, ...user };
    },
    async jwt({ token, user, account, profile, isNewUser }) {
      return token;
    }
  },
  cookies: {
    sessionToken: {
      name: process.env.NODE_ENV === 'production' ? `__Secure-next-auth.session-token` : 'next-auth.session-token',
      options: {
        httpOnly: true,
        sameSite: 'lax',
        path: '/',
        secure: process.env.NODE_ENV === 'production' ? true: false,
        domain: '.' + hostName
      }
    }
  }
}

export default (req, res) => NextAuth(req, res, options)

当我在子域应用程序中使用 getSession 时，我收到 null object，我该怎么做才能解决这个问题？ 随时询问更多详情！