fix: /auth/me les IAP-header istedenfor session

This commit is contained in:
Chris Christiansen 2026-06-24 15:59:50 +00:00
parent dcf2854a16
commit 57407bbd91

View File

@ -135,10 +135,12 @@ async def auth(request: Request):
@app.get("/auth/me") @app.get("/auth/me")
async def me(request: Request): async def me(request: Request):
user = request.session.get("user") email = request.headers.get("x-goog-authenticated-user-email", "")
if not user: if not email:
raise HTTPException(status_code=401, detail="Not authenticated") raise HTTPException(status_code=401, detail="Not authenticated")
return JSONResponse(user) # IAP sender "accounts.google.com:chris@vauco.no" - vi fjerner prefix
clean_email = email.split(":")[-1]
return JSONResponse({"email": clean_email, "authenticated": True})
@app.get('/auth/logout') @app.get('/auth/logout')
async def logout(request: Request): async def logout(request: Request):