paratron / next-server-session Goto Github PK

I tried to implement some guardrails for people using the pluckSessionProperty method. The idea of the function is that it either returns a properties value from the session object, or null, if the property does not exist on the object.

The method is async, so I tried to type it as follow:

type pluckSessionProperty<T = any>(): Promise<T | null>

So the idea is that when I call it like this:

const someValue = await pluckSessionProperty<number>();

Typescript should know that the promise might be resolved as either number or null. However, my IDE insists that the return type is always number.

Right now, just calling getSessionData() will create a new session and set a cookie. This is not necessary.

The current mergeSessionData() method should become the default setSessionData() function.

And the current setSessionData() method should be renamed to replaceSessionData().

This is more explicit and clear.

I am passing an empty body, and even in that case, validateCSRFToken able to validate the request.

It should return false if the csrfToken value is not defined.