sending access token on NextAuth cookie

[killjoy2013]

My router.yaml is;

authentication:
  experimental:
    jwt:
      jwks_urls:
        - http://localhost:3100/.well-known/jwks.json
      header_name: Authorization
      header_value_prefix: Bearer
      cooldown: 15s

However, NextAuth keeps the access token in a cookie with the name next-auth.session-token.
Is it possible to configure router.yaml to support both Authorization header & cookie?

Would it be possible to use Rhai scripts to get access token from the cookie and add it as the Bearer token to authorization header?
What would be the most suitable approach in this case?

[Geal]

I think that would be doable with rhai, when we add support for router service plugins. We're thinking about it, it is tracked here #2635

[killjoy2013]

is it possible to get the httponly cookie in rhai?
any sample code would be fantastic 🙏

[Geal]

here you go: https://github.com/apollographql/router/blob/dev/examples/cookies-to-headers/rhai/src/cookies_to_headers.rhai
rhai cannot execute yet at the router service plugin level though