correct session middleware, type safe session

src/server/api/session.delete.ts

@@ -1,7 +1,14 @@
 export default defineEventHandler(async (event) => {
-  const session = await useSession(event, SESSION_CONFIG);
+  const session = await useWGSession(event);
   const sessionId = session.id;
 
+  if (sessionId === undefined) {
+    return createError({
+      status: 401,
+      message: 'Not logged in'
+    })
+  }
+
   await session.clear();
 
   SERVER_DEBUG(`Deleted Session: ${sessionId}`);

src/server/api/session.get.ts

@@ -1,7 +1,7 @@
 export default defineEventHandler(async (event) => {
-  const session = await useSession(event, SESSION_CONFIG);
+  const session = await useWGSession(event);
   const authenticated = REQUIRES_PASSWORD
-    ? !!(session.data && session.data.authenticated)
+    ? session.data.authenticated
     : true;
 
   return {

src/server/api/session.post.ts

@@ -1,5 +1,5 @@
 export default defineEventHandler(async (event) => {
-  const session = await useSession(event, SESSION_CONFIG);
+  const session = await useWGSession(event);
   const { password } = await readBody(event);
 
   if (!REQUIRES_PASSWORD) {

src/server/middleware/session.ts

@@ -8,7 +8,11 @@ export default defineEventHandler(async (event) => {
   if (
     !REQUIRES_PASSWORD ||
     !event.node.req.url.startsWith('/api/') ||
-    event.node.req.url === '/api/session'
+    event.node.req.url === '/api/session' ||
+    event.node.req.url === '/api/lang' ||
+    event.node.req.url === '/api/release' ||
+    event.node.req.url === '/api/ui-chart-type' ||
+    event.node.req.url === '/api/ui-traffic-stats'
   ) {
     return;
   }

src/server/utils/config.ts

@@ -55,6 +55,7 @@ export const REQUIRES_PASSWORD = !!PASSWORD_HASH;
 
 export const SESSION_CONFIG = {
   password: getRandomHex(256),
+  name: 'wg-easy'
 } satisfies SessionConfig;
 
 export const SERVER_DEBUG = debug('Server');

src/server/utils/session.ts

@@ -0,0 +1,9 @@
+import type { H3Event } from 'h3';
+
+export type WGSession = {
+  authenticated: boolean
+}
+
+export function useWGSession(event: H3Event) {
+  return useSession<Partial<WGSession>>(event, SESSION_CONFIG);
+}