fix(web): hono auth middleware

apps/web/src/api/helpers.ts

@@ -1,7 +1,9 @@
+import { env } from "env/server.mjs";
 import type { Context, MiddlewareHandler } from "hono";
 import { getCookie } from "hono/cookie";
 import type { GetServerSidePropsContext } from "next";
 import type { DefaultSession } from "next-auth";
+import { decode } from "next-auth/jwt";
 import { getServerAuthSession } from "server/common/get-server-auth-session";
 import type { UserSession } from "types/next-auth";
 
@@ -24,7 +26,15 @@ export const authMiddleware: MiddlewareHandler<{
     user: UserSession & DefaultSession["user"];
   };
 }> = async (c, next) => {
-  const session = await getHonoSession(c);
+  const tokenCookie = getCookie(c, "next-auth.session-token");
+  if (!tokenCookie) return next();
+  if (!env.NEXTAUTH_SECRET) {
+    throw new Error("NEXTAUTH_SECRET is not set");
+  }
+  const session = await decode({
+    secret: env.NEXTAUTH_SECRET,
+    token: tokenCookie,
+  });
   if (!session || !session.user) {
     return c.json({ error: "Unauthorized" }, { status: 401 });
   }