Function hashSessionCookie

server/src/middleware/auth.ts:151–153

(cookie: string)

}

function hashSessionCookie(cookie: string): string {
  return createHash('sha256').update(cookie).digest('hex');
}

// Errors like JWKSTimeout (WorkOS key-fetch stall) or fetch/DNS failures are transient —
// the session cookie is still valid, the upstream is just slow. Returning 401 here would