homeio

1import "server-only";
2
3import { NextResponse } from "next/server";
4import { getAuthCookieName } from "@/lib/server/modules/auth/cookies";
5import { authenticateSession } from "@/lib/server/modules/auth/service";
6
7export type ApiSession = NonNullable<Awaited<ReturnType<typeof authenticateSession>>>;
8
9export type ApiSessionResult =
10  | {
11      session: ApiSession;
12      response: null;
13    }
14  | {
15      session: null;
16      response: NextResponse;
17    };
18
19function parseCookies(headerValue: string | null) {
20  const cookies: Record<string, string> = {};
21  if (!headerValue) return cookies;
22
23  for (const segment of headerValue.split(";")) {
24    const [rawKey, ...rawValueParts] = segment.split("=");
25    const key = rawKey?.trim();
26    if (!key) continue;
27
28    const rawValue = rawValueParts.join("=").trim();
29    if (!rawValue) continue;
30
31    try {
32      cookies[key] = decodeURIComponent(rawValue);
33    } catch {
34      cookies[key] = rawValue;
35    }
36  }
37
38  return cookies;
39}
40
41function getSessionTokenFromRequest(request: Request) {
42  const cookies = parseCookies(request.headers.get("cookie"));
43  return cookies[getAuthCookieName()] ?? null;
44}
45
46export async function requireApiSession(request: Request): Promise<ApiSessionResult> {
47  const session = await authenticateSession(getSessionTokenFromRequest(request));
48
49  if (!session) {
50    return {
51      session: null,
52      response: NextResponse.json({ error: "Unauthorized" }, { status: 401 }),
53    };
54  }
55
56  return {
57    session,
58    response: null,
59  };
60}
61