Add dal

app/auth/03-dal.ts

@@ -1,2 +1,69 @@
-// authorization begins with middleware
-// see middleware.ts
+// authorization begins with middleware.ts, where we check for a local cookie
+
+import 'server-only';
+import { db } from '@/drizzle/db';
+import { eq } from 'drizzle-orm';
+import { cookies } from 'next/headers';
+import { redirect } from 'next/navigation';
+import { cache } from 'react';
+import { users } from '@/drizzle/schema';
+import { decrypt } from '@/app/auth/02-stateless-session';
+
+export async function verifySession() {
+  const cookie = cookies().get('session')?.value;
+  const session = await decrypt(cookie);
+
+  if (!session?.userId) {
+    redirect('/login');
+  }
+
+  return { isAuth: true, userId: Number(session.userId) };
+}
+
+// Option 1: Simpler version, individual functions verify the session
+// This guarantees items cannot be fetched without a valid session
+export const getUser = cache(async () => {
+  const session = await verifySession();
+
+  if (!session) return null;
+
+  try {
+    const user = await db.query.users.findMany({
+      where: eq(users.id, session.userId),
+
+      // explicitly return the columns we need rather than the whole user object. This is a good practice...reason.
+      columns: {
+        id: true,
+        name: true,
+        email: true,
+      },
+    });
+    return user;
+  } catch (error) {
+    console.log('Failed to fetch user');
+    return null;
+  }
+});
+
+// Option 2: A class that holds all the requests that need to be authorized
+// You may consider using a class to consolidate all the requests that need to be authorized
+export class User {
+  async getUser() {
+    const session = await verifySession();
+
+    try {
+      const user = await db.query.users.findMany({
+        where: eq(users.id, session.userId),
+        columns: {
+          id: true,
+          name: true,
+          email: true,
+        },
+      });
+      return user;
+    } catch (error) {
+      console.log('Failed to fetch user');
+      return null;
+    }
+  }
+}