Function createSessionCookie

lib/auth.ts:221–250

(
  request: Request,
  user: User,
  response: Response,
  isShortLived = false,
)

}

export async function createSessionCookie(
  request: Request,
  user: User,
  response: Response,
  isShortLived = false,
) {
  const newSession = await UserSessionModel.create(user, isShortLived);

  // Generate response with session cookie
  const token = await generateToken({ user_id: user.id, session_id: newSession.id });

  const cookie: Cookie = {
    name: COOKIE_NAME,
    value: token,
    expires: newSession.expires_at,
    path: '/',
    secure: isRunningLocally(request) ? false : true,
    httpOnly: true,
    sameSite: 'Lax',
    domain: await resolveCookieDomain(request),
  };

  if (await AppConfig.isCookieDomainSecurityDisabled()) {
    delete cookie.domain;
  }

  setCookie(response.headers, cookie);

  return response;
}