Function _decode_session_cookie

app/api/agentops/auth/views.py:150–160

Decode the session cookie to get the Session object. Raises AuthException if the cookie is invalid or expired. Returns None if the session is not found.

(cookie: str)

def _decode_session_cookie(cookie: str) -> Session | None:
    """
    Decode the session cookie to get the Session object.
    Raises AuthException if the cookie is invalid or expired.
    Returns None if the session is not found.
    """
    try:
        data = jwt.decode(cookie, AUTH_COOKIE_SECRET, algorithms=[AUTH_JWT_ALGO])
        return Session.get(data['session_id'])
    except (KeyError, jwt.InvalidTokenError):
        raise AuthException("Could not decode internal session JWT.")


def _validate_request(request: Request) -> None: