feat(sveltekit): add getSessionWithSetCookies function for carrying over cookies and enabling token refresh in sveltekit

packages/frameworks-sveltekit/package.json

@@ -45,7 +45,9 @@
     "vitest": "^1.0.0"
   },
   "dependencies": {
-    "@auth/core": "workspace:*"
+    "@auth/core": "workspace:*",
+    "cookie": "0.6.0",
+    "@types/cookie": "0.6.0"
   },
   "peerDependencies": {
     "svelte": "^3.54.0 || ^4.0.0",

packages/frameworks-sveltekit/src/lib/index.ts

@@ -205,6 +205,7 @@ import { base } from "$app/paths"
 import { env } from "$env/dynamic/private"
 
 import { Auth } from "@auth/core"
+import { parse } from "cookie"
 import type { AuthAction, AuthConfig, Session } from "@auth/core/types"
 
 export type {
@@ -215,10 +216,10 @@ export type {
   User,
 } from "@auth/core/types"
 
-export async function getSession(
+export async function unstable_getSessionWithCookies(
   req: Request,
   config: SvelteKitAuthConfig
-): ReturnType<App.Locals["getSession"]> {
+): ReturnType<App.Locals["unstable_getSessionWithCookies"]> {
   config.secret ??= env.AUTH_SECRET
   config.trustHost ??= true
 
@@ -231,10 +232,22 @@ export async function getSession(
   const data = await response.json()
 
   if (!data || !Object.keys(data).length) return null
-  if (status === 200) return data
+  if (status === 200) return {
+    session: data,
+    cookies: parse(response.headers.get('set-cookie') as string)
+  }
   throw new Error(data.message)
 }
 
+export async function getSession(
+  req: Request,
+  config: SvelteKitAuthConfig
+): ReturnType<App.Locals["getSession"]> {
+  const data = await unstable_getSessionWithCookies(req, config)
+
+  return data?.session ?? null
+}
+
 /** Configure the {@link SvelteKitAuth} method. */
 export interface SvelteKitAuthConfig extends Omit<AuthConfig, "raw"> {
   /**
@@ -265,7 +278,7 @@ type DynamicSvelteKitAuthConfig = (
 function AuthHandle(
   svelteKitAuthOptions: SvelteKitAuthConfig | DynamicSvelteKitAuthConfig
 ): Handle {
-  return async function ({ event, resolve }) {
+  return async function({ event, resolve }) {
     const authOptions =
       typeof svelteKitAuthOptions === "object"
         ? svelteKitAuthOptions
@@ -306,6 +319,7 @@ declare global {
   // eslint-disable-next-line @typescript-eslint/no-namespace
   namespace App {
     interface Locals {
+      unstable_getSessionWithCookies(): Promise<{ session: Session, cookies: Record<string, string> } | null>
       getSession(): Promise<Session | null>
     }
     interface PageData {