Completely custom provider (no OAuth/email/password/etc.)

[smblee]

Hello,

I am interested in creating a completely custom provider that will use a physical device scan (think NFC scan) to auth users. I want to see if i can leverage AuthJS framework for the session management part only (cookie persistence, revoking, etc.).

The Auth will revolve around dynamic URL params to /auth?param1=....&dynamicparam=..., run some cryptographic checks, and will work as ID/password.

Looks like I need to use credentials provider as a base, but from the doc it seems to only support form submission with a body, whereas mine has to be embedded into a URL.

Is there a best way for me to get started?