@youngshand/payload-auth-plugin/dist/esm/core/protocols/session.js

A temporary fork for testing of Authentication plugin for Payload CMS, use @payload-auth-plugin

// src/core/protocols/session.ts
import { parseCookies } from "payload";
import {
  UnauthorizedAPIRequest,
  UserNotFoundAPIError
} from "../errors/apiErrors.js";
import { createSessionCookies, verifySessionCookie } from "../utils/cookies.js";
import { ErrorKind, SuccessKind } from "../../types.js";
var SessionRefresh = async (cookieName, secret, request) => {
  const cookies = parseCookies(request.headers);
  const token = cookies.get(cookieName);
  if (!token) {
    return new UnauthorizedAPIRequest;
  }
  const jwtResponse = await verifySessionCookie(token, secret);
  if (!jwtResponse.payload) {
    return new UnauthorizedAPIRequest;
  }
  let refreshCookies = [];
  refreshCookies = [
    ...await createSessionCookies(cookieName, secret, jwtResponse.payload)
  ];
  const res = new Response(JSON.stringify({
    message: "Session refreshed",
    kind: SuccessKind.Updated,
    isSuccess: true,
    isError: false
  }), {
    status: 201
  });
  refreshCookies.forEach((cookie) => {
    res.headers.append("Set-Cookie", cookie);
  });
  return res;
};
var UserSession = async (cookieName, secret, request, internal, fields) => {
  const cookies = parseCookies(request.headers);
  const token = cookies.get(cookieName);
  console.log(cookies.get("payload-token"));
  if (!token) {
    return new Response(JSON.stringify({
      message: "Missing user session",
      kind: ErrorKind.NotAuthenticated,
      data: {
        isAuthenticated: false
      }
    }), {
      status: 403
    });
  }
  const jwtResponse = await verifySessionCookie(token, secret);
  if (!jwtResponse.payload) {
    return new Response(JSON.stringify({
      message: "Invalid user session",
      kind: ErrorKind.NotAuthenticated,
      data: {
        isAuthenticated: false
      },
      isSuccess: false,
      isError: true
    }), {
      status: 401
    });
  }
  const doc = await request.payload.findByID({
    collection: internal.usersCollectionSlug,
    id: jwtResponse.payload.id
  });
  if (!doc?.id) {
    return new UserNotFoundAPIError;
  }
  const queryData = {};
  fields.forEach((field) => {
    if (Object.hasOwn(doc, field)) {
      queryData[field] = doc[field];
    }
  });
  return new Response(JSON.stringify({
    message: "Fetched user session",
    kind: SuccessKind.Retrieved,
    data: {
      isAuthenticated: true,
      ...queryData
    },
    isSuccess: true,
    isError: false
  }), {
    status: 201
  });
};
export {
  UserSession,
  SessionRefresh
};