auth-vir - v5.2.0
    Preparing search index...

    Function insecureExtractUserIdFromCookieAlone

    • Extract a user id from just the cookie, without CSRF token validation. This is less secure than extractUserIdFromRequestHeaders as a result. This should only be used in rare circumstances where you cannot rely on client-side JavaScript to insert the CSRF token.

      Type Parameters

      • UserId extends string | number

      Parameters

      • __namedParameters: Readonly<
            {
                cookieName: AuthCookie;
                cookieNameSuffix?: string;
                headers: HeaderContainer;
                jwtParams: Readonly<ParseJwtParams>;
            },
        >

      Returns Promise<Readonly<UserIdResult<UserId>> | undefined>

      Prefer extractUserIdFromRequestHeaders instead: it is more secure.