Function getAuthSession

src/server/model/auth.ts:145–197

(
  req: IncomingMessage,
  secure = false
)

 * Pure request of auth session
 */
export async function getAuthSession(
  req: IncomingMessage,
  secure = false
): Promise<Session | null> {
  const protocol = secure ? 'https:' : 'http:';
  const url = createActionURL(
    'session',
    protocol,
    // @ts-expect-error
    new Headers(req.headers),
    process.env,
    authConfig.basePath
  );

  if (!req.headers.cookie) {
    logger.warn('No cookie in request, can not get auth session:', {
      protocol,
      headers: req.headers,
    });
  }

  const response = await Auth(
    new Request(url, { headers: { cookie: req.headers.cookie ?? '' } }),
    authConfig
  );

  const { status = 200 } = response;

  // Read text first to avoid "Body has already been read" error
  const raw = await response.text();

  let data;
  try {
    data = JSON.parse(raw);
  } catch (error) {
    logger.error('Failed to parse auth session response:', error);
    return null;
  }

  if (!data || !Object.keys(data).length) {
    logger.error('Can not get info, auth session raw:', {
      raw,
      protocol,
      headers: req.headers,
    });
    return null;
  }

  if (status === 200) {
    return data;
  }
  throw new Error(data.message);
}

function toAdapterUser(
  user: Pick<