Function _create_session_for_response

app/api/agentops/auth/views.py:296–321

Create a session for the user based on the access token and set the session cookie in the response.

(response: Response, access_token: str)

def _create_session_for_response(response: Response, access_token: str) -> Response:
    """
    Create a session for the user based on the access token and set the session cookie in the response.
    """
    user_data: SupabaseUserData = _decode_supabase_jwt(access_token)
    user_id = uuid.UUID(user_data.sub)

    session = Session.create(user_id)

    cookie_value = _encode_session_cookie(session)

    cookie_domain = _get_api_domain()
    cookie_secure = 'https' in API_URL

    response.set_cookie(
        key=AUTH_COOKIE_NAME,
        value=cookie_value,
        httponly=True,  # not accessible to JavaScript
        secure=cookie_secure,  # only send over https in production
        domain=cookie_domain,  # set cookie for the api domain
        max_age=AUTH_COOKIE_EXPIRY,
        samesite="strict",
        path="/",  # valid across all paths
    )

    return response


@public_route