- Added isomorphic-dompurify for improved XSS protection - Refactored token storage to use in-memory management for access tokens - Implemented server-side route handlers for OAuth token management - Introduced security headers in next.config.js - Removed client-side exposure of client_secret and sensitive tokens - Updated API interceptors to handle token refresh logic - Cleaned up cookie management for refresh tokens
10 lines
286 B
JavaScript
10 lines
286 B
JavaScript
import { cookies } from "next/headers";
|
|
|
|
export async function getUser() {
|
|
const cookieStore = await cookies();
|
|
const isAuthenticated =
|
|
cookieStore.get("refresh_token") && cookieStore.get("userInfo");
|
|
if (!isAuthenticated) return null;
|
|
return cookieStore.get("userInfo");
|
|
}
|