getUser

In the browser

getUser(): Promise<InhausUser | null>

Asks the gateway who is signed in, through GET /__inhaus/me on the app's own address.

import { getUser } from '@inhaus/sdk';

const user = await getUser();
if (user) document.querySelector('#who').textContent = user.email;

Returns null when nobody is signed in or the person has no access. Throws on any other error.

In server code

getUser(request: Request): InhausUser | null

Reads the x-inhaus-user header the gateway adds to every request. The gateway removes any x-inhaus-* header sent from outside first, so your app can trust it.

import { getUser } from '@inhaus/sdk';

export default {
  async fetch(request: Request) {
    const user = getUser(request);
    return Response.json({ hello: user?.name });
  },
};

Returns null when the header is missing or has expired.

InhausUser

Verifying the header yourself

The header is a signed token. If you want to check the signature rather than trust the gateway, the public key is in env.INHAUS_GATEWAY_PUBLIC_KEY.