refactor!: prefer event.context instead of nitro-app

playground/server/plugins/authorization-reolver.ts

@@ -1,9 +1,12 @@
 import type { User } from '~/types/user'
 
 export default defineNitroPlugin((nitroApp) => {
-  nitroApp.$authorization = {
-    resolveServerUser: () => {
-      return { id: 2, name: 'User 1' } satisfies User
-    },
-  }
+  // https://github.com/nuxt/nuxt/issues/25710#issuecomment-1935622896
+  nitroApp.hooks.hook('request', async (event) => {
+    event.context.$authorization = {
+      resolveServerUser: () => {
+        return { id: 1, name: 'User 1' } satisfies User
+      },
+    }
+  })
 })

playground/utils/abilities.ts

@@ -6,5 +6,6 @@ export const listProducts = defineAbility({ allowGuest: true }, () => true)
 export const createProduct = defineAbility(() => true)
 
 export const editProduct = defineAbility((user: User, product: Product) => {
+  console.log('user', user, product)
   return user.id === product.ownerId
 })

src/runtime/server/utils/bouncer.ts

@@ -1,13 +1,13 @@
 import { type H3Event } from 'h3'
 import type { AuthorizerResponse, BouncerAbility } from '../../../utils'
 import { allows as _allows, denies as _denies, authorize as _authorize, AuthorizationError } from '../../../utils'
-import { useNitroApp, createError } from '#imports'
+import { createError } from '#imports'
 
 /**
  * Allows a user to perform an action based on their role and the data.
  */
 export async function allows<Ability extends BouncerAbility<any>>(event: H3Event, bouncerAbility: Ability, ...args: Ability extends { original: (user: any, ...args: infer Args) => AuthorizerResponse } ? Args : never): Promise<boolean> {
-  const user = await useNitroApp().$authorization.resolveServerUser(event)
+  const user = await event.context.$authorization.resolveServerUser()
 
   return _allows(bouncerAbility, user, ...args)
 }
@@ -16,7 +16,7 @@ export async function allows<Ability extends BouncerAbility<any>>(event: H3Event
  * Denies a user to perform an action based on their role and the data.
  */
 export async function denies<Ability extends BouncerAbility<any>>(event: H3Event, bouncerAbility: Ability, ...args: Ability extends { original: (user: any, ...args: infer Args) => AuthorizerResponse } ? Args : never): Promise<boolean> {
-  const user = await useNitroApp().$authorization.resolveServerUser(event)
+  const user = await event.context.$authorization.resolveServerUser()
 
   return _denies(bouncerAbility, user, ...args)
 }
@@ -26,7 +26,7 @@ export async function denies<Ability extends BouncerAbility<any>>(event: H3Event
  */
 export async function authorize<Ability extends BouncerAbility<any>>(event: H3Event, bouncerAbility: Ability, ...args: Ability extends { original: (user: any, ...args: infer Args) => AuthorizerResponse } ? Args : never): Promise<void> {
   try {
-    const user = await useNitroApp().$authorization.resolveServerUser(event)
+    const user = await event.context.$authorization.resolveServerUser()
 
     await _authorize(bouncerAbility, user, ...args)
   }