The ChatBotKit SDK for NextAuth.js enables passwordless email authentication that integrates directly with ChatBotKit. This allows you to authenticate users without building separate user management infrastructure.
This SDK provides two adapters for different use cases:
Use ChatBotKitUserAdapter when each application user needs an isolated ChatBotKit User:
Use ChatBotKitContactAdapter when you want all users to be contacts within a single ChatBotKit account:
Authentication is complex and risky to build yourself. This SDK lets you skip all of that.
Instead of spending weeks building and maintaining authentication infrastructure, you can:
Build lighter, future-proof AI agents. When you build with ChatBotKit, the heavy lifting happens on our servers-not in your application. This architectural advantage delivers:
🪶 Lightweight Agents: Your agents stay lean because complex AI processing, model orchestration, and tool execution happen server-side. Less code in your app means faster load times and simpler maintenance.
🛡️ Robust & Streamlined: Server-side processing provides a more reliable experience with built-in error handling, automatic retries, and consistent behavior across all platforms.
🔄 Backward & Forward Compatible: As AI technology evolves-new models, new capabilities, new paradigms-your agents automatically benefit. No code changes required on your end.
🔮 Future-Proof: Agents you build today will remain capable tomorrow. When we add support for new AI models or capabilities, your existing agents gain those powers without any updates to your codebase.
This means you can focus on building great user experiences while ChatBotKit handles the complexity of the ever-changing AI landscape.
Add the SDK to your project using npm:
npm install @chatbotkit/nextauth next-auth
Use this approach when each application user needs an isolated ChatBotKit environment:
import {
ChatBotKitEmailProvider,
ChatBotKitUserAdapter,
MemoryStore,
} from '@chatbotkit/nextauth/user'
const nextAuthConfig = {
adapter: ChatBotKitUserAdapter({
secret: process.env.CHATBOTKIT_API_SECRET,
// Use Redis or another persistent store in production
store: new MemoryStore(),
// Control user lifecycle
autoCreateUser: false,
autoUpdateUser: true,
autoDeleteUser: false,
}),
providers: [
ChatBotKitEmailProvider({
async sendVerificationRequest({ identifier, token }) {
await sendEmail({
to: identifier,
subject: 'Sign in to your account',
text: `Your verification code is: ${token}`,
})
},
}),
],
session: {
strategy: 'jwt',
},
callbacks: {
async session({ session, token }) {
session.user = token.user
return session
},
async jwt({ token, user }) {
if (user) {
token.user = user
}
return token
},
},
pages: {
signIn: '/signin',
signOut: '/signin',
verifyRequest: '/verify',
},
debug: !!process.env.DEBUG,
}
export default nextAuthConfig
Use this approach when users are contacts within a single ChatBotKit account:
import {
ChatBotKitContactAdapter,
ChatBotKitContactEmailProvider,
ContactMemoryStore,
} from '@chatbotkit/nextauth/contact'
const nextAuthConfig = {
adapter: ChatBotKitContactAdapter({
secret: process.env.CHATBOTKIT_API_SECRET,
// Use Redis or another persistent store in production
store: new ContactMemoryStore(),
// Control contact lifecycle
autoCreateContact: true,
autoUpdateContact: true,
autoDeleteContact: false,
}),
providers: [
ChatBotKitContactEmailProvider({
async sendVerificationRequest({ identifier, token }) {
await sendEmail({
to: identifier,
subject: 'Sign in to your account',
text: `Your verification code is: ${token}`,
})
},
}),
],
session: {
strategy: 'jwt',
},
callbacks: {
async session({ session, token }) {
session.user = token.user
return session
},
async jwt({ token, user }) {
if (user) {
token.user = user
}
return token
},
},
pages: {
signIn: '/signin',
signOut: '/signin',
verifyRequest: '/verify',
},
debug: !!process.env.DEBUG,
}
export default nextAuthConfig
Create pages/api/auth/[...nextauth].js:
import NextAuth from 'next-auth'
import nextAuthConfig from '../../../nextauth.config.js'
export default NextAuth(nextAuthConfig)
Add your ChatBotKit API secret to .env:
CHATBOTKIT_API_SECRET=your_api_secret_here
| Feature | User Adapter | Contact Adapter |
|---|---|---|
| User isolation | Complete (separate Users) | Partial (shared account, individual contacts) |
| Resource sharing | None (each User owns its resources) | Full (all contacts share bots/datasets) |
| API type | User API | Standard API |
| User identity | Separate ChatBotKit accounts | Contacts within single account |
| Best for | SaaS, white-label, multi-tenant | Chat apps, support systems, communities |
A complete working example demonstrating passwordless authentication with the ChatBotKit User API can be found in the user-auth example.
For comprehensive information about the ChatBotKit NextAuth SDK, including detailed documentation on its functionalities, helper methods, and configuration options, please visit our type documentation page.
If you find a bug or would like to contribute to the ChatBotKit SDK, please open an issue or submit a pull request on the official GitHub repository.