Function validateAuthToken

apps/extension/src/shared/auth.ts:191–225

({
  apiBaseUrl,
  fetch,
  signal,
  token,
}: ValidateAuthTokenOptions)

};

export const validateAuthToken = async ({
  apiBaseUrl,
  fetch,
  signal,
  token,
}: ValidateAuthTokenOptions): Promise<TokenValidationResult> => {
  const requestInit: RequestInit = {
    headers: { Authorization: `Bearer ${token}` },
    ...(signal === undefined ? {} : { signal }),
  };
  const response = await fetch(`${trimTrailingSlash(apiBaseUrl)}/api/user`, requestInit);

  if (response.status === 401 || response.status === 403) {
    return { status: 'invalid' };
  }

  if (!response.ok) {
    return { status: 'error' };
  }

  const data: unknown = await response.json();
  const parsed = userResponseSchema.safeParse(data);

  if (!parsed.success) {
    return { auth: { token, userEmail: undefined }, status: 'valid' };
  }

  return {
    auth: {
      token,
      userEmail: parsed.data.google_user_email,
    },
    status: 'valid',
  };
};