# Get your API key from the Turalogin dashboard
TURALOGIN_API_KEY=tl_live_xxxxxxxxxxxxx

# Where login links redirect to
LOGIN_VALIDATION_URL=http://localhost:3000/auth/verify

1
import { NextResponse } from 'next/server';
2
 
3
export async function POST(request: Request) {
4
  const { email } = await request.json();
5
 
6
  const response = await fetch(
7
    'https://api.turalogin.com/api/v1/auth/start',
8
    {
9
      method: 'POST',
10
      headers: {
11
        'Authorization': `Bearer ${process.env.TURALOGIN_API_KEY}`,
12
        'Content-Type': 'application/json',
13
      },
14
      body: JSON.stringify({
15
        email,
16
        validationUrl: process.env.LOGIN_VALIDATION_URL,
17
      }),
18
    }
19
  );
20
 
21
  if (!response.ok) {
22
    const error = await response.json();
23
    return NextResponse.json(error, { status: response.status });
24
  }
25
 
26
  return NextResponse.json({ 
27
    success: true,
28
    message: 'Check your email for the login link'
29
  });
30
}

1
import { NextResponse } from 'next/server';
2
import { cookies } from 'next/headers';
3
 
4
export async function POST(request: Request) {
5
  const { sessionId } = await request.json();
6
 
7
  const response = await fetch(
8
    'https://api.turalogin.com/api/v1/auth/verify',
9
    {
10
      method: 'POST',
11
      headers: {
12
        'Authorization': `Bearer ${process.env.TURALOGIN_API_KEY}`,
13
        'Content-Type': 'application/json',
14
      },
15
      body: JSON.stringify({ sessionId }),
16
    }
17
  );
18
 
19
  if (!response.ok) {
20
    const error = await response.json();
21
    return NextResponse.json(error, { status: response.status });
22
  }
23
 
24
  const { user, token } = await response.json();
25
 
26
  // Create YOUR session (you control this!)
27
  const cookieStore = await cookies();
28
  cookieStore.set('session', token, {
29
    httpOnly: true,
30
    secure: process.env.NODE_ENV === 'production',
31
    sameSite: 'lax',
32
    maxAge: 60 * 60 * 24 * 7, // 7 days
33
  });
34
 
35
  return NextResponse.json({ success: true, user });
36
}

1
'use client';
2
import { useState } from 'react';
3
 
4
export default function LoginPage() {
5
  const [email, setEmail] = useState('');
6
  const [sent, setSent] = useState(false);
7
  const [loading, setLoading] = useState(false);
8
 
9
  async function handleSubmit(e: React.FormEvent) {
10
    e.preventDefault();
11
    setLoading(true);
12
 
13
    const res = await fetch('/api/auth/login', {
14
      method: 'POST',
15
      headers: { 'Content-Type': 'application/json' },
16
      body: JSON.stringify({ email }),
17
    });
18
 
19
    if (res.ok) setSent(true);
20
    setLoading(false);
21
  }
22
 
23
  if (sent) {
24
    return (
25
      <div className="text-center p-8">
26
        <h1>Check your email!</h1>
27
        <p>We sent a login link to {email}</p>
28
      </div>
29
    );
30
  }
31
 
32
  return (
33
    <form onSubmit={handleSubmit} className="p-8 max-w-md mx-auto">
34
      <input
35
        type="email"
36
        value={email}
37
        onChange={(e) => setEmail(e.target.value)}
38
        placeholder="Enter your email"
39
        className="w-full p-3 border rounded"
40
        required
41
      />
42
      <button
43
        type="submit"
44
        disabled={loading}
45
        className="w-full mt-4 p-3 bg-blue-600 text-white rounded"
46
      >
47
        {loading ? 'Sending...' : 'Send login link'}
48
      </button>
49
    </form>
50
  );
51
}

1
'use client';
2
import { useEffect } from 'react';
3
import { useSearchParams, useRouter } from 'next/navigation';
4
 
5
export default function VerifyPage() {
6
  const params = useSearchParams();
7
  const router = useRouter();
8
 
9
  useEffect(() => {
10
    const token = params.get('token');
11
    if (!token) return;
12
 
13
    fetch('/api/auth/verify', {
14
      method: 'POST',
15
      headers: { 'Content-Type': 'application/json' },
16
      body: JSON.stringify({ sessionId: token }),
17
    })
18
      .then((res) => res.json())
19
      .then(() => router.push('/dashboard'))
20
      .catch(() => router.push('/login?error=invalid'));
21
  }, [params, router]);
22
 
23
  return <div className="p-8 text-center">Signing you in...</div>;
24
}