Function getUserAndSession

apps/hash-api/src/auth/create-auth-handlers.ts:130–206

({
  context,
  cookie,
  logger,
  sessionToken,
}: {
  context: ImpureGraphContext;
  cookie?: string;
  logger: Logger;
  sessionToken?: string;
})

};

export const getUserAndSession = async ({
  context,
  cookie,
  logger,
  sessionToken,
}: {
  context: ImpureGraphContext;
  cookie?: string;
  logger: Logger;
  sessionToken?: string;
}): Promise<{
  session?: Session;
  user?: User;
}> => {
  const authentication = { actorId: systemAccountId };

  const kratosSession = await kratosFrontendApi
    .toSession({
      cookie,
      xSessionToken: sessionToken,
    })
    .then(({ data }) => data)
    .catch((err: AxiosError) => {
      if (err.response && err.response.status === 403) {
        logger.debug(
          "Session requires AAL2 but only has AAL1. Treating as unauthenticated.",
        );
        return undefined;
      }
      logger.debug(
        `Kratos response error: Could not fetch session, got: [${
          err.response?.status
        }] ${JSON.stringify(err.response?.data)}`,
      );
      return undefined;
    });

  if (kratosSession) {
    const { identity } = kratosSession;

    if (!identity) {
      throw new Error("Could not find kratos identity for session");
    }

    const { id: kratosIdentityId, traits } = identity as KratosUserIdentity;

    let user = await getUser(context, authentication, {
      kratosIdentityId,
      emails: traits.emails,
    });

    if (!user) {
      const hashInstance = await getHashInstance(context, authentication);

      if (!hashInstance.userSelfRegistrationIsEnabled) {
        throw new Error("User registration is disabled.");
      }