155 lines
3.3 KiB
TypeScript
155 lines
3.3 KiB
TypeScript
/**
|
|
* Supabase Auth Server Utilities
|
|
*
|
|
* Server-side auth helpers for API routes, middleware, and server components
|
|
*/
|
|
|
|
import { createServerClient } from '@supabase/ssr'
|
|
import { cookies } from 'next/headers'
|
|
import type { Database } from '@/lib/database.types'
|
|
|
|
/**
|
|
* Create Supabase client for server-side use
|
|
* Handles cookies for session management
|
|
*/
|
|
export async function createClient() {
|
|
const cookieStore = await cookies()
|
|
|
|
return createServerClient<Database>(
|
|
process.env.NEXT_PUBLIC_SUPABASE_URL!,
|
|
process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,
|
|
{
|
|
cookies: {
|
|
getAll() {
|
|
return cookieStore.getAll()
|
|
},
|
|
setAll(cookiesToSet) {
|
|
try {
|
|
cookiesToSet.forEach(({ name, value, options }) =>
|
|
cookieStore.set(name, value, options)
|
|
)
|
|
} catch {
|
|
// The `setAll` method was called from a Server Component.
|
|
// This can be ignored if you have middleware refreshing
|
|
// user sessions.
|
|
}
|
|
},
|
|
},
|
|
}
|
|
)
|
|
}
|
|
|
|
/**
|
|
* Get current session (server-side)
|
|
*/
|
|
export async function getSession() {
|
|
const supabase = await createClient()
|
|
const { data: { session }, error } = await supabase.auth.getSession()
|
|
|
|
if (error) throw error
|
|
|
|
return session
|
|
}
|
|
|
|
/**
|
|
* Get current user (server-side)
|
|
*/
|
|
export async function getUser() {
|
|
const supabase = await createClient()
|
|
const { data: { user }, error } = await supabase.auth.getUser()
|
|
|
|
if (error) throw error
|
|
|
|
return user
|
|
}
|
|
|
|
/**
|
|
* Require authentication - throws if not authenticated
|
|
* Use in API routes and server actions
|
|
*/
|
|
export async function requireAuth() {
|
|
const session = await getSession()
|
|
|
|
if (!session) {
|
|
throw new Error('Authentication required')
|
|
}
|
|
|
|
return session
|
|
}
|
|
|
|
/**
|
|
* Check if user is authenticated (server-side)
|
|
*/
|
|
export async function isAuthenticated() {
|
|
const session = await getSession()
|
|
return !!session
|
|
}
|
|
|
|
/**
|
|
* Check if current user is a demo user (server-side)
|
|
*/
|
|
export async function isDemoUser(): Promise<boolean> {
|
|
const supabase = await createClient()
|
|
const user = await getUser()
|
|
|
|
if (!user) return false
|
|
|
|
const { data, error } = await supabase
|
|
.from('demo_users')
|
|
.select('id')
|
|
.eq('user_id', user.id)
|
|
.single()
|
|
|
|
if (error) return false
|
|
|
|
return !!data
|
|
}
|
|
|
|
/**
|
|
* Get demo user info (server-side)
|
|
*/
|
|
export async function getDemoUserInfo() {
|
|
const supabase = await createClient()
|
|
const user = await getUser()
|
|
|
|
if (!user) return null
|
|
|
|
const { data, error } = await supabase
|
|
.from('demo_users')
|
|
.select('*')
|
|
.eq('user_id', user.id)
|
|
.single()
|
|
|
|
if (error) return null
|
|
|
|
return data
|
|
}
|
|
|
|
/**
|
|
* Check if demo user has write access
|
|
*/
|
|
export async function canWrite(): Promise<boolean> {
|
|
const demoInfo = await getDemoUserInfo()
|
|
|
|
// Non-demo users can write
|
|
if (!demoInfo) return true
|
|
|
|
// Only 'interactive' and 'presenter' demo users can write
|
|
return ['interactive', 'presenter'].includes(demoInfo.access_level)
|
|
}
|
|
|
|
/**
|
|
* Track demo user login
|
|
*/
|
|
export async function trackDemoLogin(userId: string) {
|
|
const supabase = await createClient()
|
|
|
|
await supabase
|
|
.from('demo_users')
|
|
.update({
|
|
usage_count: supabase.rpc('increment', { row_id: userId }),
|
|
last_login_at: new Date().toISOString()
|
|
})
|
|
.eq('user_id', userId)
|
|
}
|