From 786703ea4976d76e6907bb5cb6f56723be0124e4 Mon Sep 17 00:00:00 2001
From: Maximilian Mikus <maximilianmikus@gmail.com>
Date: Wed, 31 Jan 2024 15:16:43 +0100
Subject: [PATCH 1/2] feat: add replaceUserSession()

---
 README.md                           |  4 ++++
 src/runtime/server/utils/session.ts | 13 +++++++++++++
 2 files changed, 17 insertions(+)

diff --git a/README.md b/README.md
index 8fe3ae69..a6e99ffb 100644
--- a/README.md
+++ b/README.md
@@ -90,6 +90,7 @@ The following helpers are auto-imported in your `server/` directory.
 ```ts
 // Set a user session, note that this data is encrypted in the cookie but can be decrypted with an API call
 // Only store the data that allow you to recognize an user, but do not store sensitive data
+// Merges new data with existing data using defu()
 await setUserSession(event, {
   user: {
     // ... user data
@@ -98,6 +99,9 @@ await setUserSession(event, {
   // Any extra fields
 })
 
+// Replace a user session. Same behaviour as setUserSession, except it does not merge data with existing data
+await replaceUserSession(event, data)
+
 // Get the current user session
 const session = await getUserSession(event)
 
diff --git a/src/runtime/server/utils/session.ts b/src/runtime/server/utils/session.ts
index 2f5b1c9f..f648417d 100644
--- a/src/runtime/server/utils/session.ts
+++ b/src/runtime/server/utils/session.ts
@@ -36,6 +36,19 @@ export async function setUserSession (event: H3Event, data: UserSession) {
   return session.data
 }
 
+/**
+ * Replace a user session
+ * @param event
+ * @param data User session data, please only store public information since it can be decoded with API calls
+ */
+export async function replaceUserSession (event: H3Event, data: UserSession) {
+  const session = await _useSession(event)
+
+  await session.update(data)
+
+  return session.data
+}
+
 export async function clearUserSession (event: H3Event) {
   const session = await _useSession(event)
 

From eeed7c563ed0c31aa0a8c2152c48fee25132e272 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?S=C3=A9bastien=20Chopin?= <seb@nuxt.com>
Date: Tue, 13 Feb 2024 16:02:30 +0100
Subject: [PATCH 2/2] chore: update

---
 src/module.ts                       | 1 +
 src/runtime/server/utils/session.ts | 1 +
 2 files changed, 2 insertions(+)

diff --git a/src/module.ts b/src/module.ts
index 6366a3b3..1de8f817 100644
--- a/src/module.ts
+++ b/src/module.ts
@@ -42,6 +42,7 @@ export default defineNuxtModule<ModuleOptions>({
               'sessionHooks',
               'getUserSession',
               'setUserSession',
+              'replaceUserSession',
               'clearUserSession',
               'requireUserSession',
             ]
diff --git a/src/runtime/server/utils/session.ts b/src/runtime/server/utils/session.ts
index f648417d..b16b7db5 100644
--- a/src/runtime/server/utils/session.ts
+++ b/src/runtime/server/utils/session.ts
@@ -44,6 +44,7 @@ export async function setUserSession (event: H3Event, data: UserSession) {
 export async function replaceUserSession (event: H3Event, data: UserSession) {
   const session = await _useSession(event)
 
+  await session.clear()
   await session.update(data)
 
   return session.data