Function signIn

apps/web/src/lib/user/server.ts:638–892

({ user, account, profile })

    }),
    DiscordProvider({
      clientId: DISCORD_OAUTH_CLIENT_ID ?? '',
      clientSecret: DISCORD_OAUTH_CLIENT_SECRET ?? '',
    }),
    LinkedInProvider({
      clientId: LINKEDIN_CLIENT_ID,
      clientSecret: LINKEDIN_CLIENT_SECRET,
      issuer: 'https://www.linkedin.com/oauth',
      wellKnown: 'https://www.linkedin.com/oauth/.well-known/openid-configuration',
      client: {
        token_endpoint_auth_method: 'client_secret_post',
      },
      authorization: {
        params: {
          scope: 'openid profile email',
        },
      },
      userinfo: {
        // Use OpenID Connect userinfo endpoint instead of legacy REST API
        url: 'https://api.linkedin.com/v2/userinfo',
      },
      profile(profile) {
        // LinkedIn OpenID Connect returns profile in this format
        const email = profile.email || profile.email_address;
        const name = parseLinkedInProfileName(profile);
        const picture = profile.picture || profile.profile_picture;

        return {
          id: profile.sub,
          email: email,
          name: name,
          image: picture,
        };
      },
    }),
    WorkOSProvider({
      clientId: WORKOS_CLIENT_ID,
      clientSecret: WORKOS_API_KEY,
      client: {
        token_endpoint_auth_method: 'client_secret_post',
      },
    }),
    // Email provider for magic link authentication using CredentialsProvider
    // We use CredentialsProvider because EmailProvider requires a database adapter,
    // but we're using JWT sessions without an adapter
    CredentialsProvider({
      id: 'email',
      name: 'Email',
      credentials: {
        token: { label: 'Token', type: 'text' },
      },
      async authorize(credentials) {
        if (!credentials?.token) {
          return null;
        }

        const tokenData = await verifyAndConsumeMagicLinkToken(credentials.token);

        if (!tokenData) {