mirror of
https://github.com/tiennm99/bsk.git
synced 2026-08-26 02:25:49 +00:00
tiennm99
b47d8fc3d1
- app/, components/, lib/, i18n/, tests/, proxy renamed via git mv - types carried into JSDoc: @template generics, @typedef aliases, /** @type */ casts where TS had as-casts or non-null assertions - role tuple keeps its const assertion; the db-enum drift guard now checks the tuple values against the generated enum type - use client/use server directives and server-only imports preserved - prettier-formatted; vitest suite unchanged
89 lines
3.1 KiB
JavaScript
89 lines
3.1 KiB
JavaScript
import "server-only";
|
|
import { createSupabaseServerClient } from "@/lib/supabase/server";
|
|
import { isAppRole } from "@/lib/db/roles";
|
|
|
|
/** @typedef {import("@/lib/db/roles").AppRole} AppRole */
|
|
|
|
// Derive the User type from the factory's return type so we never import
|
|
// @supabase/supabase-js directly (ESLint no-restricted-imports enforces that
|
|
// only the named factory files in lib/supabase/* may do so).
|
|
/** @typedef {Awaited<ReturnType<typeof createSupabaseServerClient>>} SupabaseServerClient */
|
|
/** @typedef {Awaited<ReturnType<SupabaseServerClient["auth"]["getUser"]>>} GetUserResult */
|
|
/** @typedef {NonNullable<GetUserResult["data"]["user"]>} User */
|
|
|
|
/**
|
|
* @typedef {object} ServerSession
|
|
* @property {User} user
|
|
* @property {AppRole | null} role
|
|
* @property {string | null} fullName Display name from bsk.app_users.full_name; null until an admin sets it.
|
|
*/
|
|
|
|
/**
|
|
* Reads the authenticated user and their BSK role from the current request.
|
|
*
|
|
* Returns `null` when unauthenticated or when `getUser()` fails (transient
|
|
* Supabase outage). Returns `{ user, role: null }` when the user is
|
|
* authenticated but has no row in `bsk.app_users` (e.g. just signed up,
|
|
* awaiting role assignment by admin).
|
|
*
|
|
* MUST be called outside any `'use cache'` scope — it calls
|
|
* `createSupabaseServerClient()` which reads `cookies()`. Cached helpers that
|
|
* need the session must receive `user` / `role` as arguments, never re-read
|
|
* cookies internally.
|
|
*
|
|
* Used by: `[locale]/layout.tsx` (phase 02 establishes the pattern),
|
|
* protected route layouts (phase 06), and Server Actions that need role checks.
|
|
*
|
|
* @returns {Promise<ServerSession | null>}
|
|
*/
|
|
export async function getServerSession() {
|
|
/** @type {SupabaseServerClient} */
|
|
let supabase;
|
|
|
|
try {
|
|
supabase = await createSupabaseServerClient();
|
|
} catch {
|
|
// Cookie store unavailable (e.g. called during static generation).
|
|
return null;
|
|
}
|
|
|
|
// getUser() round-trips to Supabase Auth and validates the JWT server-side.
|
|
// Do NOT use getSession() here — it trusts the cookie blob without validation.
|
|
const {
|
|
data: { user },
|
|
error: userError,
|
|
} = await supabase.auth.getUser();
|
|
|
|
if (userError ?? !user) {
|
|
return null;
|
|
}
|
|
|
|
// Read role + display name in ONE own-row query. The app_users_select_own
|
|
// RLS policy (migration 20260525163300) permits a user to read their own row,
|
|
// so a direct select is equivalent to the current_role() RPC for the caller's
|
|
// own role — and folds the former separate full_name lookup into the same
|
|
// round-trip. Pre-provisioning (table absent) or transient DB errors fall
|
|
// back to role/fullName = null, never an auth failure.
|
|
/** @type {AppRole | null} */
|
|
let role = null;
|
|
/** @type {string | null} */
|
|
let fullName = null;
|
|
|
|
try {
|
|
const { data: profile } = await supabase
|
|
.from("app_users")
|
|
.select("role, full_name")
|
|
.eq("user_id", user.id)
|
|
.maybeSingle();
|
|
|
|
if (profile) {
|
|
if (isAppRole(profile.role)) role = profile.role;
|
|
fullName = profile.full_name ?? null;
|
|
}
|
|
} catch {
|
|
// Pre-provisioning or transient DB error: proceed with role/fullName null.
|
|
}
|
|
|
|
return { user, role, fullName };
|
|
}
|