release: WRNexusJS 0.5.10

packages/auth/src/http/index.ts

@@ -9,7 +9,11 @@ import {
   getAuthUser,
 } from "../middleware.ts";
 import { resolveAuthSchemas, type AuthSchemaOverrides, type AuthSchemaSet } from "../validation.ts";
-import type { AuthSignedInHandler, AuthSignedOutHandler } from "../types.ts";
+import type {
+  AuthSessionVerificationHandler,
+  AuthSignedInHandler,
+  AuthSignedOutHandler,
+} from "../types.ts";
 
 function text(value: unknown): string {
   return typeof value === "string" ? value : value == null ? "" : String(value);
@@ -53,6 +57,7 @@ export interface AuthHttpOptions {
   onSignedIn?: AuthSignedInHandler;
   /** @deprecated Prefer createAuthEngine({ onSignedOut }). */
   onSignedOut?: AuthSignedOutHandler;
+  onSessionVerification?: AuthSessionVerificationHandler;
 }
 
 export function createAuthHttpHandlers(options: AuthHttpOptions) {
@@ -83,6 +88,21 @@ export function createAuthHttpHandlers(options: AuthHttpOptions) {
   }
 
   return {
+    async verifySession(ctx: Context): Promise<Response> {
+      const user = getAuthUser(ctx);
+      if (options.onSessionVerification) {
+        return options.onSessionVerification(ctx, user);
+      }
+      if (!user) return json({ ok: false, error: "Unauthorized" }, 401);
+      if ((ctx.req.headers.get("accept") ?? "").includes("application/json")) {
+        return json({ ok: true, user });
+      }
+      return new Response(null, {
+        status: 204,
+        headers: { "cache-control": "no-store" },
+      });
+    },
+
     async register(ctx: Context): Promise<Response> {
       const validation = await parseBody(schemas.register, ctx.req);
       if (!validation.ok) return validation.response;