Authenticating API calls with Kinde

import { getKindeServerSession } from "@kinde-oss/kinde-auth-nextjs/server";

export async function POST(request: Request) {
  try {
    const headers = request.headers;
    headers.forEach((value, key) => {
      console.log(`[api/profiles] POST: Header: ${key}, Value: ${value}`);
    });
    const { getUser } = getKindeServerSession();
    const user = await getUser();
    if(!user) {
      console.warn(`[api/profiles] POST: user not authenticated`);
      throw new Error(`User not authenticated`);
    }
    const data = await request.json();
    const profileId = await createProfile(data);
    return NextResponse.json({ ok: true, profileId });
  } catch (e) {
    console.error(`[api/profiles] POST error`, e);
    return NextResponse.json({ ok: false, error: e instanceof Error ? e.message : 'Unknown error' }, { status: 500 });
  }
}

import { getKindeServerSession } from "@kinde-oss/kinde-auth-nextjs/server";

export async function POST(request: Request) {
  try {
    const headers = request.headers;
    headers.forEach((value, key) => {
      console.log(`[api/profiles] POST: Header: ${key}, Value: ${value}`);
    });
    const { getUser } = getKindeServerSession();
    const user = await getUser();
    if(!user) {
      console.warn(`[api/profiles] POST: user not authenticated`);
      throw new Error(`User not authenticated`);
    }
    const data = await request.json();
    const profileId = await createProfile(data);
    return NextResponse.json({ ok: true, profileId });
  } catch (e) {
    console.error(`[api/profiles] POST error`, e);
    return NextResponse.json({ ok: false, error: e instanceof Error ? e.message : 'Unknown error' }, { status: 500 });
  }
}

import {Users, init} from "@kinde/manangement-api-js"

...
init()
const user = await Users.getUserData({ id: 'kp_xxx' });

import {Users, init} from "@kinde/manangement-api-js"

...
init()
const user = await Users.getUserData({ id: 'kp_xxx' });

    "@kinde-oss/kinde-auth-nextjs": "^2.3.10",
    "@kinde/management-api-js": "^0.11.0",

    "@kinde-oss/kinde-auth-nextjs": "^2.3.10",
    "@kinde/management-api-js": "^0.11.0",

export async function getKindeUserByAccessToken(accessToken: string): Promise<KindeUser | null> {
  try {
    // Decode the JWT token (it's base64 encoded)
    const [, payload] = accessToken.split('.');
    const decodedPayload = JSON.parse(Buffer.from(payload, 'base64').toString());
    const kindeId = decodedPayload.sub;

    if (!kindeId) {
      throw new Error('No sub claim found in access token');
    } else {
      console.debug(`[kinde] Found Kinde ID ${kindeId} in access token`);
    }

    // Fetch the full user details using the Kinde ID
    const userResponse = await fetch(
      `${process.env.KINDE_ISSUER_URL}/api/v1/user?id=${kindeId}`,
      {
        headers: {
          Authorization: `Bearer ${process.env.KINDE_API_KEY}`,
          Accept: "application/json",
        },
      }
    )

    if (!userResponse.ok) {
      const json = await userResponse.json();
      console.warn(`[kinde] Failed to fetch Kinde user: ${userResponse.statusText}:\n`, json);
      return null;
    }

    const userData = await userResponse.json()
    return userData;
  } catch (error) {
    console.error("Error fetching Kinde user by access token:", error)
    return null
  }
}

export async function getKindeUserByAccessToken(accessToken: string): Promise<KindeUser | null> {
  try {
    // Decode the JWT token (it's base64 encoded)
    const [, payload] = accessToken.split('.');
    const decodedPayload = JSON.parse(Buffer.from(payload, 'base64').toString());
    const kindeId = decodedPayload.sub;

    if (!kindeId) {
      throw new Error('No sub claim found in access token');
    } else {
      console.debug(`[kinde] Found Kinde ID ${kindeId} in access token`);
    }

    // Fetch the full user details using the Kinde ID
    const userResponse = await fetch(
      `${process.env.KINDE_ISSUER_URL}/api/v1/user?id=${kindeId}`,
      {
        headers: {
          Authorization: `Bearer ${process.env.KINDE_API_KEY}`,
          Accept: "application/json",
        },
      }
    )

    if (!userResponse.ok) {
      const json = await userResponse.json();
      console.warn(`[kinde] Failed to fetch Kinde user: ${userResponse.statusText}:\n`, json);
      return null;
    }

    const userData = await userResponse.json()
    return userData;
  } catch (error) {
    console.error("Error fetching Kinde user by access token:", error)
    return null
  }
}

    "module": "esnext",
    "moduleResolution": "node",

    "module": "esnext",
    "moduleResolution": "node",