How to get session during api call?

[akay0214]

Question 💬

Hi everyone,

I've googled it and haven't found anything similar so I'm posting it here.

I have API endpoint I consume on the client side.

/page/api/job.ts

import {config, db} from "../../database/db";
import nc from "next-connect";
import  {NextApiRequestWithDb} from '../../middleware/withDb';
import {JobType} from "../../database/schema/JobType";
import {getSession} from "next-auth/client";

const handler = nc<NextApiRequest, NextApiResponse>()
    .get((req, res) => {
        res.send("Hello world");
    })
    .post<NextApiRequestWithDb, NextApiResponse>((req, res) => {
        res.json({ hello: "world" });
    })
    .put(async (req, res) => {
        res.end("async/await is also supported!");
    })
    .patch(async (req, res) => {
        throw new Error("Throws me around! Error can be caught and handled.");
    });

export default handler;```

1. How I can get session and user id on api side?
2. What is the best way to restrict api call, so only logged in users can query it from the client?

[balazsorban44]

Have you tried the docs? 😉

https://next-auth.js.org/tutorials/securing-pages-and-api-routes#securing-api-routes