FR-22443 Enhance getSession function to require response object (#436)

Author: vladFrontegg

packages/nextjs/src/middleware/FronteggApiMiddleware.ts

@@ -49,7 +49,7 @@ const middlewarePromise = (req: NextApiRequest, res: NextApiResponse, options?:
     }
     const headers: Record<string, string> = {};
     if (process.env['FRONTEGG_SECURE_JWT_ENABLED'] === 'true') {
-      const session = await getSession(req);
+      const session = await getSession(req, res);
       if (session?.accessToken) {
         headers['authorization'] = 'Bearer ' + session.accessToken;
       }

packages/nextjs/src/pages/helpers.ts

@@ -10,7 +10,18 @@ import { hasSetSessionCookie } from '../utils/refreshAccessTokenIfNeeded/helpers
 import { NextResponse } from 'next/server';
 import { ServerResponse } from 'http';
 
-export const getSession = (req: RequestType, res?: ServerResponse) => {
+/**
+ * Retrieves the Frontegg session from Next.js request and response objects.
+ *
+ * @param req - The Next.js request object containing incoming HTTP request data
+ * @param res - The Next.js response object (or undefined). This parameter is required and must be explicitly passed.
+ *              It will be non-null in cases where there are sequential redirects or multiple getInitialProps
+ *              executions within a single page visit — for example, when middlewares or getServerSideProps
+ *              functions are concatenated.
+ *
+ * @returns The Frontegg session if available, or undefined if no session exists
+ */
+export const getSession = (req: RequestType, res: ServerResponse | undefined) => {
   if (res && hasSetSessionCookie(res.getHeader('set-cookie'))) {
     const cookies = CookieManager.getSessionCookieFromRedirectedResponse(res);
     return createSession(cookies, encryption);