From d686d1bd4f0588e256c85be5f621ae45cbaf4acd Mon Sep 17 00:00:00 2001 From: Christopher Mayor Date: Mon, 27 Apr 2026 11:43:42 -0700 Subject: [PATCH] fix: use plain Headers for auth session lookup in compare route --- src/app/api/compare/route.ts | 13 ++++++------- 1 file changed, 6 insertions(+), 7 deletions(-) diff --git a/src/app/api/compare/route.ts b/src/app/api/compare/route.ts index 4d109fd..988e2a4 100644 --- a/src/app/api/compare/route.ts +++ b/src/app/api/compare/route.ts @@ -24,13 +24,12 @@ function slugify(text: string): string { // const ratelimit = new Ratelimit({ redis, limiter: slidingWindow(5, "1m") }) export async function POST(request: Request) { - let session; - try { - session = await auth.api.getSession({ headers: request.headers }); - } catch (e) { - console.error("[compare] getSession error:", e); - return Response.json({ error: "Session lookup failed", detail: String(e) }, { status: 500 }); - } + // Use a plain Headers object to avoid any Request-header quirks + const headers = new Headers(); + const cookie = request.headers.get("cookie"); + if (cookie) headers.set("cookie", cookie); + + const session = await auth.api.getSession({ headers }); if (!session?.user) { return Response.json({ error: "Authentication required" }, { status: 401 }); }