fix: always return 200 for session endpoint (#130)

* fix: always return 200 for session endpoint

* chore: add test

Author: atinux

src/runtime/server/api/session.get.ts

@@ -1,10 +1,13 @@
 import { eventHandler } from 'h3'
-import { requireUserSession, sessionHooks } from '../utils/session'
+import { getUserSession, sessionHooks } from '../utils/session'
+import type { UserSessionRequired } from '#auth-utils'
 
 export default eventHandler(async (event) => {
-  const session = await requireUserSession(event)
+  const session = await getUserSession(event)
 
-  await sessionHooks.callHookParallel('fetch', session, event)
+  if (session.user) {
+    await sessionHooks.callHookParallel('fetch', session as UserSessionRequired, event)
+  }
 
   return session
 })

test/basic.test.ts

@@ -20,4 +20,10 @@ describe('ssr', async () => {
     const html = await $fetch('/')
     expect(html).toContain('<div>Nuxt Auth Utils</div>')
   })
+
+  it('returns an empty session', async () => {
+    // Get response to a server-rendered page with `$fetch`.
+    const session = await $fetch('/api/_auth/session')
+    expect(session).toStrictEqual({})
+  })
 })