Inline Diff Viewer

 1// Refresh the auth token
 2import { refresh } from "@beste/auth";
 3.
−4const session = refresh.from(req.cookies);
+5const session = await refresh.fromCookies(req);
 6.
−7// Old: rotate every other request
−8if (request.count % 2 === 0) session.rotate();
+9// Rotate on every use
+10session.rotate();
 11.
+12// Persist as httpOnly cookie
+13session.save({ cookie: "secure" });
 14export default session;