refactor: review cookie code for auth

This commit is contained in:
Julien Froidefond
2025-08-28 12:07:35 +02:00
parent 725a368b7e
commit 117ac243f5
4 changed files with 34 additions and 84 deletions

View File

@@ -1,5 +1,6 @@
import { NextRequest, NextResponse } from "next/server";
import { AuthService, userService } from "@/services";
import bcrypt from "bcryptjs";
export async function POST(request: NextRequest) {
@@ -44,9 +45,6 @@ export async function POST(request: NextRequest) {
);
}
// Générer un token de session
const sessionToken = await AuthService.createSession(newUser.uuid_id);
// Créer la réponse avec le cookie de session
const response = NextResponse.json(
{
@@ -62,14 +60,8 @@ export async function POST(request: NextRequest) {
{ status: 201 }
);
// Définir le cookie de session
response.cookies.set("session_token", sessionToken, {
httpOnly: true,
secure: process.env.NODE_ENV === "production",
sameSite: "lax",
maxAge: 60 * 60 * 24 * 7, // 7 jours
path: "/",
});
// Créer la session et définir le cookie
await AuthService.createSession(newUser.uuid_id, response);
return response;
} catch (error) {