NextAuth谷歌账号二次登录触发OAuthAccountNotLinked错误排查

OAuthAccountNotLinked错误的核心原因是：用户首次用未注册的谷歌邮箱登录时，NextAuth已创建对应用户及OAuth账号记录，但再次登录时，系统通过邮箱匹配到现有用户后，无法找到该用户与当前谷歌OAuth账号的关联记录，进而触发未关联错误。大概率是NextAuth的Mongoose适配器配置或signIn回调逻辑存在疏漏。

以下是针对性修复步骤：

1. 修正[...nextAuth].ts的回调与适配器逻辑 #

在signIn回调中主动处理OAuth账号与已有用户的关联，避免因适配器逻辑缺失导致的关联失败：

// [...nextAuth].ts
import NextAuth from "next-auth";
import GoogleProvider from "next-auth/providers/google";
import CredentialsProvider from "next-auth/providers/credentials";
import { MongoDBAdapter } from "@next-auth/mongodb-adapter";
import clientPromise from "../../../lib/mongodb";
import User from "../../../models/User";
import bcrypt from "bcryptjs";

export default NextAuth({
  adapter: MongoDBAdapter(clientPromise),
  providers: [
    GoogleProvider({
      clientId: process.env.GOOGLE_CLIENT_ID!,
      clientSecret: process.env.GOOGLE_CLIENT_SECRET!,
    }),
    CredentialsProvider({
      credentials: {
        email: { label: "Email", type: "email" },
        password: { label: "Password", type: "password" },
      },
      async authorize(credentials) {
        if (!credentials?.email || !credentials?.password) return null;
        const user = await User.findOne({ email: credentials.email });
        if (!user) return null;
        const isValid = await bcrypt.compare(credentials.password, user.password);
        return isValid ? user : null;
      },
    }),
  ],
  callbacks: {
    async signIn({ user, account }) {
      if (account?.provider !== "google") return true;
      
      // 查找同邮箱的已有用户
      const existingUser = await User.findOne({ email: user.email });
      if (!existingUser) return true;

      // 检查用户是否已关联当前谷歌账号
      const hasLinkedAccount = await User.exists({
        _id: existingUser._id,
        "accounts.provider": account.provider,
        "accounts.providerAccountId": account.providerAccountId,
      });

      // 未关联则手动绑定账号
      if (!hasLinkedAccount) {
        await User.findByIdAndUpdate(existingUser._id, {
          $push: { accounts: account },
        });
      }
      return true;
    },
  },
  session: { strategy: "jwt" },
  pages: { error: "/auth/error" },
});

2. 确保Mongoose User模型包含账号关联字段 #

你的User模型必须定义accounts数组，用于存储OAuth账号关联信息：

// models/User.ts
import mongoose from "mongoose";

const AccountSchema = new mongoose.Schema({
  provider: String,
  providerAccountId: String,
  type: String,
  access_token: String,
  expires_at: Number,
  id_token: String,
  scope: String,
  token_type: String,
});

const UserSchema = new mongoose.Schema({
  name: String,
  email: { type: String, unique: true, required: true },
  password: String,
  emailVerified: Date,
  image: String,
  accounts: [AccountSchema], // 必须保留该字段存储OAuth账号关联
});

export default mongoose.models.User || mongoose.model("User", UserSchema);

3. 清理测试数据并重新验证 #

本地测试时，若存在重复或异常的用户/账号数据，会干扰登录逻辑：

• 清空MongoDB中users和accounts集合的测试数据
• 用未注册的谷歌邮箱首次登录，确认用户及账号记录正常创建
• 退出后再次用同一谷歌邮箱登录，检查是否无错误正常进入应用

内容的提问来源于stack exchange，提问作者Robert