Method decrypt

src/server/web/auth/adapter.ts:198–210

Decrypts a value produced by encrypt. Returns null on failure.

(encoded: string)

  /** Decrypts a value produced by {@link encrypt}. Returns null on failure. */
  decrypt(encoded: string): string | null {
    try {
      const buf = Buffer.from(encoded, "base64url");
      const iv = buf.subarray(0, 12);
      const tag = buf.subarray(12, 28);
      const ciphertext = buf.subarray(28);
      const decipher = createDecipheriv("aes-256-gcm", this.key, iv);
      decipher.setAuthTag(tag);
      return decipher.update(ciphertext).toString("utf8") + decipher.final("utf8");
    } catch {
      return null;
    }
  }

  // ── Internals ─────────────────────────────────────────────────────────────