Files
nobat724_front/lib/auth.js
T
hamed 194ffd889c feat: enhance security by implementing HttpOnly refresh tokens and in-memory access token management
- Added isomorphic-dompurify for improved XSS protection
- Refactored token storage to use in-memory management for access tokens
- Implemented server-side route handlers for OAuth token management
- Introduced security headers in next.config.js
- Removed client-side exposure of client_secret and sensitive tokens
- Updated API interceptors to handle token refresh logic
- Cleaned up cookie management for refresh tokens
2026-06-20 13:10:17 +03:30

10 lines
286 B
JavaScript

import { cookies } from "next/headers";
export async function getUser() {
const cookieStore = await cookies();
const isAuthenticated =
cookieStore.get("refresh_token") && cookieStore.get("userInfo");
if (!isAuthenticated) return null;
return cookieStore.get("userInfo");
}