Set cookie before sending the response if valid

[Atinux]

This way we can use a second serverMiddleware to update the session before setting the cookie.

Example:

import { createApp } from 'h3'
import { listen } from 'listhen'
import { createAuthMiddleware } from 'ezpass'

const app = createApp()

app.useAsync(createAuthMiddleware({
  provider: 'github',
  sessionSecret: '...',
  providerOptions: {
    clientId: '...',
    clientSecret: '...'
  }
}))

app.useAsync((req) => {
  if (req.auth.session) {
    req.auth.session.visits = req.auth.session.visits || 0
    req.auth.session.visits++
  }
})
app.useAsync(req => `Welcome ${req.auth.session.user}, you visited ${req.auth.session.visits} times!`)

listen(app)

[Atinux]

One potential solution would be to overwrites res.send and res.end (see https://stackoverflow.com/questions/27885425/express-middleware-before-response-is-carried-out-to-client)

[Atinux]

Or the possibility to inject a hook or middleware here:

ezpass/src/index.ts

Line 42 in 3822cda

This way, the end user can add another verification on top of the initial provider to either reject the auth or update the authRes.session to add some infos.

[pi0]

Adding a hook seems good idea :)

[pi0]

Added support for onAuthorize hook as option