TopherMayor/comparaison
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix #12: extract session token before dot (Better Auth signed cookie)

Browse Source 
Better Auth cookie format is 'token.signature' but DB only stores the
token portion. Split on '.' to extract the actual session token.
This commit is contained in:
Christopher Mayor
2026-04-27 12:38:16 -07:00
parent d8eb0eef8e
commit 2e138a8364
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/app/api/compare/route.ts
View File

@@ -30,7 +30,7 @@ export async function POST(request: Request) {
.split(";") .split(";")
.map((c) => c.trim()) .map((c) => c.trim())
.find((c) => c.startsWith("__Secure-better-auth.session_token=") || c.startsWith("better-auth.session_token=")); .find((c) => c.startsWith("__Secure-better-auth.session_token=") || c.startsWith("better-auth.session_token="));
const token = cookieMatch?.split("=")?.slice(1)?.join("=")?.trim(); const token = cookieMatch?.split("=")?.slice(1)?.join("=")?.trim().split(".")[0];
if (!token) { if (!token) {
return Response.json({ error: "Authentication required" }, { status: 401 }); return Response.json({ error: "Authentication required" }, { status: 401 });

2
src/app/api/user/comparisons/route.ts
View File

@@ -11,7 +11,7 @@ export async function GET(request: Request) {
.split(";") .split(";")
.map((c) => c.trim()) .map((c) => c.trim())
.find((c) => c.startsWith("__Secure-better-auth.session_token=") || c.startsWith("better-auth.session_token=")); .find((c) => c.startsWith("__Secure-better-auth.session_token=") || c.startsWith("better-auth.session_token="));
const token = cookieMatch?.split("=")?.slice(1)?.join("=")?.trim(); const token = cookieMatch?.split("=")?.slice(1)?.join("=")?.trim().split(".")[0];
if (!token) { if (!token) {
return Response.json({ error: "Unauthorized" }, { status: 401 }); return Response.json({ error: "Unauthorized" }, { status: 401 });
} }

2
src/app/api/user/stats/route.ts
View File

@@ -11,7 +11,7 @@ export async function GET() {
.split(";") .split(";")
.map((c) => c.trim()) .map((c) => c.trim())
.find((c) => c.startsWith("__Secure-better-auth.session_token=") || c.startsWith("better-auth.session_token=")); .find((c) => c.startsWith("__Secure-better-auth.session_token=") || c.startsWith("better-auth.session_token="));
const token = cookieMatch?.split("=")?.slice(1)?.join("=")?.trim(); const token = cookieMatch?.split("=")?.slice(1)?.join("=")?.trim().split(".")[0];
if (!token) { if (!token) {
return Response.json({ error: "Unauthorized" }, { status: 401 }); return Response.json({ error: "Unauthorized" }, { status: 401 });
} }