Function requireAuth

apps/api/src/api/auth/auth.plugin.ts:154–173

()

 * `/refresh`, `/mfa/status`), reach for `tryAuth` instead.
 */
export const requireAuth = () =>
  new Elysia()
    .use(createJWTConfig())
    .derive(
      async ({
        jwt: jwtPlugin,
        cookie,
      }): Promise<{ user: IUser; accountId: string }> => {
        const session = await verifyAuthCookie(
          jwtPlugin,
          cookie[AUTH_COOKIE_NAME]?.value
        );

        if (session === null) {
          throw ApiErrors.unauthorized("Missing authentication cookie");
        }

        return session;
      }
    );

/**
 * Best-effort auth guard. Resolves the session if one is presented and