Function getProfileRedirectPath

apps/web/src/lib/user/server.ts:1170–1187

(user: User)

  if (user.blocked_reason) {
    redirect('/account-blocked');
  }
  return user;
}

export async function getUserFromBearerForCredentialExchange(
  requestHeaders: Headers,
  policy: KiloCredentialExchangeEligibilityPolicy
): Promise<GetAuthResponse> {
  const token = extractBearerToken(requestHeaders.get('authorization'));
  if (!token) return authError(401, 'Unauthorized', '?');

  let auth: Awaited<ReturnType<typeof verifyKiloTokenForPolicy>>;
  try {
    auth = await verifyKiloTokenForPolicy(token, NEXTAUTH_SECRET, {
      audience: KILO_API_AUDIENCE,
      mode: 'allow-legacy',
    });
  } catch {
    return authError(401, 'Unauthorized', '?');
  }