import config from '../config.js';
import { findSessionUser } from './service.js';

export function loadUser(req, _res, next) {
  const sid = req.cookies?.[config.auth.cookieName];
  req.user = findSessionUser(sid);
  req.sessionId = sid ?? null;
  next();
}

export function requireAuth(req, res, next) {
  if (!req.user) return res.status(401).json({ error: 'Not signed in.' });
  next();
}