debug: add logging to session middleware for auth investigation

This commit is contained in:
Sanju Sivalingam
2026-02-18 11:59:59 +05:30
parent 68ca812267
commit d03be7365e

View File

@@ -16,13 +16,15 @@ export async function sessionMiddleware(c: Context, next: Next) {
// Extract session token from cookie (same approach as dashboard WS auth) // Extract session token from cookie (same approach as dashboard WS auth)
const rawCookie = getCookie(c, "better-auth.session_token"); const rawCookie = getCookie(c, "better-auth.session_token");
if (!rawCookie) { if (!rawCookie) {
console.log(`[SessionMiddleware] No session cookie. Headers: ${JSON.stringify(Object.fromEntries(c.req.raw.headers.entries())).slice(0, 200)}`);
return c.json({ error: "unauthorized" }, 401); return c.json({ error: "unauthorized" }, 401);
} }
// Token may have a signature appended after a dot — use only the token part // Token may have a signature appended after a dot — use only the token part
const token = rawCookie.split(".")[0]; const token = rawCookie.split(".")[0];
console.log(`[SessionMiddleware] cookie prefix: ${rawCookie.slice(0, 20)}... token prefix: ${token.slice(0, 20)}...`);
// Direct DB lookup (proven to work, unlike auth.api.getSession) // Direct DB lookup
const rows = await db const rows = await db
.select({ .select({
sessionId: sessionTable.id, sessionId: sessionTable.id,