Neon Authorize + Better Auth JWT + Drizzle + Row Level Security

const res = await auth.api.token({
headers: {} // instead of doing {} you would pass in your request headers for example in nextjs headers:await headers()
})

const token = res.token;
if(!token) {
  console.log("token could not be requested");
} else {
  // do what you want with token
}

const res = await auth.api.token({
headers: {} // instead of doing {} you would pass in your request headers for example in nextjs headers:await headers()
})

const token = res.token;
if(!token) {
  console.log("token could not be requested");
} else {
  // do what you want with token
}

export async function insertTodo(newTodo: { newTodo: string; userId: string }) {
  // instead of doing {} you would pass in your request headers for example in nextjs headers:await headers()
  const headersList = {};

  //get the current user session
  const session = await auth.api.getSession({
    headers: headersList,
  });

  // ensure use is authed
  if (!session) throw new Error('Not authenticated');

  // get userid from session
  const { userId } = session

  // get the jwt token from the api
  const res = await auth.api.token({
    headers: headersList,
  });
  const token = res.token;

  // ensure token was recieved
  if (!token) throw new Error('Error getting token');

  // User   mismatch
  if (newTodo.userId !== userId) throw new Error('Unauthorized');

  const db = drizzle(process.env.DATABASE_AUTHENTICATED_URL!, { schema });
  return db.$withAuth(authToken).insert(schema.todos).values({
    task: newTodo.newTodo,
    isComplete: false,
    userId, // Explicitly ties todo to the user
  });
}

export async function insertTodo(newTodo: { newTodo: string; userId: string }) {
  // instead of doing {} you would pass in your request headers for example in nextjs headers:await headers()
  const headersList = {};

  //get the current user session
  const session = await auth.api.getSession({
    headers: headersList,
  });

  // ensure use is authed
  if (!session) throw new Error('Not authenticated');

  // get userid from session
  const { userId } = session

  // get the jwt token from the api
  const res = await auth.api.token({
    headers: headersList,
  });
  const token = res.token;

  // ensure token was recieved
  if (!token) throw new Error('Error getting token');

  // User   mismatch
  if (newTodo.userId !== userId) throw new Error('Unauthorized');

  const db = drizzle(process.env.DATABASE_AUTHENTICATED_URL!, { schema });
  return db.$withAuth(authToken).insert(schema.todos).values({
    task: newTodo.newTodo,
    isComplete: false,
    userId, // Explicitly ties todo to the user
  });
}

<NeonQueryProvider
    db={getDb("authenticated")}
    fetchEndpoint={`${getURL()}/api/sql`} // optional endpoint for custom proxy
    mutateInvalidate={true}
    optimisticMutate={true}
    token={token}
>{children}</NeonQueryProvider>

<NeonQueryProvider
    db={getDb("authenticated")}
    fetchEndpoint={`${getURL()}/api/sql`} // optional endpoint for custom proxy
    mutateInvalidate={true}
    optimisticMutate={true}
    token={token}
>{children}</NeonQueryProvider>