Function UseSessions

packages/core/src/sessions/http/use-sessions.hook.ts:47–196

(options: UseSessionOptions = {})

);

export function UseSessions(options: UseSessionOptions = {}): HookDecorator {

  function badRequestOrRedirect(description: string): HttpResponse {
    if (options.redirectTo) {
      return new HttpResponseRedirect(options.redirectTo);
    }
    return new HttpResponseBadRequest({ code: 'invalid_request', description });
  }

  function unauthorizedOrRedirect(description: string): HttpResponse {
    if (options.redirectTo) {
      return new HttpResponseRedirect(options.redirectTo);
    }
    return new HttpResponseUnauthorized({ code: 'invalid_token', description })
      .setHeader(
        'WWW-Authenticate',
        `error="invalid_token", error_description="${description}"`
      );
  }

  async function hook(ctx: Context, services: ServiceManager) {
    const ConcreteSessionStore: ClassOrAbstractClass<SessionStore> = options.store || SessionStore;
    const store = services.get(ConcreteSessionStore);

    async function postFunction(response: HttpResponse) {
      if (!(ctx.session) || isHttpResponseInternalServerError(response)) {
        return;
      }

      if (ctx.session.isDestroyed) {
        if (options.cookie) {
          removeSessionCookie(response, !!options.userCookie);
        }
        return;
      }

      await ctx.session.commit();

      if (options.cookie) {
        const userCookie = options.userCookie ? await options.userCookie(ctx, services) : undefined;
        setSessionCookie(response, ctx.session, userCookie);
      }
    }

    /* Validate the request */

    let sessionID: string|undefined;

    try {
      sessionID = getSessionIDFromRequest(ctx.request, options.cookie ? 'token-in-cookie' : 'token-in-header', !!options.required);
    } catch (error) {
      if (error instanceof RequestValidationError) {
        return badRequestOrRedirect(error.message);
      }
      // TODO: test this.
      throw error;
    }