3pp-mirror/rallly
1
0
Fork 0
mirror of https://github.com/lukevella/rallly.git synced 2025-07-25 12:17:26 +02:00
Code Issues Projects Releases Packages Wiki Activity

🐛 Only migrate legacy token if nextauth token doesn’t exist

Browse source
This commit is contained in:
Luke Vella 2023-11-03 22:33:46 +00:00
parent 1e93a4f65b
commit 25da819774
1 changed files with 23 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

43
apps/web/src/middleware.ts
View file

@ -42,27 +42,30 @@ export default withAuth(
const res = NextResponse.rewrite(newUrl);
/**
* We moved from a bespoke session implementation to next-auth.
* This middleware looks for the old session cookie and moves it to
* a temporary cookie accessible to the client which will exchange it
* for a new session token with the legacy-token provider.
*/
const legacyToken = req.cookies.get("rallly-session");
if (legacyToken) {
// delete old cookie
res.cookies.delete("rallly-session");
// make sure old cookie isn't expired
const payload = await unsealData(legacyToken.value, {
password: process.env.SECRET_PASSWORD,
});
// if it's not expired, write it to a new cookie that we
// can read from the client
if (Object.keys(payload).length > 0) {
res.cookies.set({
name: "legacy-token",
value: legacyToken.value,
if (!req.nextauth.token) {
/**
* We moved from a bespoke session implementation to next-auth.
* This middleware looks for the old session cookie and moves it to
* a temporary cookie accessible to the client which will exchange it
* for a new session token with the legacy-token provider.
*/
const legacyToken = req.cookies.get("rallly-session");
if (legacyToken) {
// delete old cookie
res.cookies.delete("rallly-session");
// make sure old cookie isn't expired
const payload = await unsealData(legacyToken.value, {
password: process.env.SECRET_PASSWORD,
});
// if it's not expired, write it to a new cookie that we
// can read from the client
if (Object.keys(payload).length > 0) {
res.cookies.set({
name: "legacy-token",
value: legacyToken.value,
httpOnly: false,
});
}
}
}