Get Server Session in Server Actions

[EliasGcf]

Question 💬

How to get the session inside a Server Actions?

Show this error:

How to reproduce ☕️

export async function create(formData: FormData) {
  'use server';

  const session = await getServerSession();

  console.log(session);
}

Contributing 🙌🏽

Yes, I am willing to help answer this question in a PR

[EliasGcf]

It worked sending it via the function param. Is it a good solution/alternative to the code I first provided for now?

Like this:

<form action={(formData) => create(formData, session)}>

In the network tab:

[Talent30]

vercel/next.js#49235

[stale]

It looks like this issue did not receive any activity for 60 days. It will be closed in 7 days if no further activity occurs. If you think your issue is still relevant, commenting will keep it open. Thanks!

[ThangHuuVu]

this is an upstream issue with Next.js that is linked above. Please try next@13.4.2-canary.2, thanks 🙏

[mr-schulz]

It worked sending it via the function param. Is it a good solution/alternative to the code I first provided for now?

Like this:

<form action={(formData) => create(formData, session)}>

In the network tab:

i think this is unsecure and everybody should avoid it!
server actions are basicly post requests, a attacker could manipulate or create the session part in create(formData, session)}

maybe it only make sence if there is encrypted token in the session, which can be checked on server side (server action body)

correct me please if i am wrong

[mcapodici]

An adaptation of this worked for me (source: https://www.reddit.com/r/nextjs/comments/13eb1vj/comment/jjptpkx/?utm_source=reddit&utm_medium=web2x&context=3)

My server action looks like this:

export async function addNewChatAgent(data: Values) {
    const session = await getServerSession(authOptions)
    if (!session) {
        throw Error("oops");
    }
    const { userId } = session as any;
    const agent: NewChatAgent = {
        model: data.model,
        name: data.name,
        user_id: session.user.id,       
    }
    await db.insert(chatAgent).values(agent);
}

[liuhe2020]

An adaptation of this worked for me (source: https://www.reddit.com/r/nextjs/comments/13eb1vj/comment/jjptpkx/?utm_source=reddit&utm_medium=web2x&context=3)

My server action looks like this:

export async function addNewChatAgent(data: Values) {
    const session = await getServerSession(authOptions)
    if (!session) {
        throw Error("oops");
    }
    const { userId } = session as any;
    const agent: NewChatAgent = {
        model: data.model,
        name: data.name,
        user_id: session.user.id,       
    }
    await db.insert(chatAgent).values(agent);
}

Works a treat, thank you!