import type { H3Event } from 'h3';
import { auth } from '~~/lib/auth';

export const protectRoute = async (event: H3Event) => {
    const sessionData = await auth.api.getSession({
        headers: event.headers,
        query: { disableCookieCache: true },
    });

    if (sessionData === null || sessionData.user.banned) {
        throw createError({
            statusCode: 401,
            statusMessage: 'Unauthorized',
        });
    }

    event.context.user = sessionData.user;
    return sessionData;
};