no-copy-admin-panel-frontend/src/app/actions/session.ts

'use server';

/* import 'server-only'; */
import { cookies } from 'next/headers';
import { SignJWT, jwtVerify } from 'jose';
import { redirect } from 'next/navigation';
import { headers } from 'next/headers';

/* const secretKey = process.env.SESSION_SECRET */
const secretKey = 'AAA+sq1yKte/gMgUUu/B/OyXqr45/LMYplPVOlWc+uo='
const encodedKey = new TextEncoder().encode(secretKey)

export async function encrypt(payload: any) {
	return new SignJWT(payload)
		.setProtectedHeader({ alg: 'HS256' })
		.setIssuedAt()
		.setExpirationTime('7d')
		.sign(encodedKey)
}

export async function decrypt(session: string | undefined = '') {
	try {
		const { payload } = await jwtVerify(session, encodedKey, {
			algorithms: ['HS256'],
		})
		return payload
	} catch (error) {
		console.log('Failed to verify session')
	}
}

export async function createSession(token: string, email: string) {
	const expiresAt = new Date(Date.now() + 50 * 60 * 1000);
	const session = await encrypt({
		token,
		email,
		expiresAt
	});
	const cookieStore = await cookies();

	cookieStore.set('session', session, {
		httpOnly: true,
		secure: false,
		expires: expiresAt,
		sameSite: 'lax',
		path: '/',
	});
}

export async function updateSession(newToken: string) {
	const cookieStore = await cookies();
	const session = cookieStore.get('session')?.value;

	if (!session) {
		return null;
	}

	const payload = await decrypt(session);

	if (!payload) {
		return null;
	}

	const updatedPayload = {
		...payload,
		token: newToken,
		expiresAt: new Date(Date.now() + 50 * 60 * 1000)
	};

	const updatedSession = await encrypt(updatedPayload);

	cookieStore.set('session', updatedSession, {
		httpOnly: true,
		secure: false,
		expires: updatedPayload.expiresAt,
		sameSite: 'lax',
		path: '/',
	});
}

export async function getSessionData(type: 'token' | 'email'): Promise<string | null> {
	const cookieStore = await cookies();
	const sessionCookie = cookieStore.get('session')?.value;

	if (!sessionCookie) {
		return null;
	}

	const payload = await decrypt(sessionCookie);

	if (payload && typeof payload === 'object' && type in payload) {
		return payload[type] as string;
	}

	return null;
}


export async function deleteSession() {
	console.log('delete session')
	try {
		const cookieStore = await cookies()
		cookieStore.delete('session');
	} catch (error) {

	} finally {
		redirect('/login');
	}
}