users need always login

private/server.rkt

@@ -54,7 +54,6 @@
   (let ((user (auth-request-user current-auth request)))
     (json-response
      (hasheq 'enabled (auth-enabled? current-auth)
-             'local (auth-request-local? current-auth request)
              'authenticated (and user #t)
              'username (or user 'null)))))
 
@@ -215,6 +214,24 @@
   (regexp-match? #px"^/api/(?:auth|agent)(?:/|$)"
                  (request-path request)))
 
+(define (response-add-header value extra-header)
+  (response (response-code value)
+            (response-message value)
+            (response-seconds value)
+            (response-mime value)
+            (cons extra-header (response-headers value))
+            (response-output value)))
+
+(define (dispatch-api request)
+  (define value (api-dispatch request))
+  (define renewed-cookie
+    (and (not (regexp-match? #px"^/api/agent(?:/|$)"
+                             (request-path request)))
+         (auth-renewal-cookie current-auth request)))
+  (if renewed-cookie
+      (response-add-header value (header #"Set-Cookie" renewed-cookie))
+      value))
+
 (define (dispatch request)
   (cond
     ((and (bytes=? (request-method request) #"POST")
@@ -225,7 +242,7 @@
       #:code 415))
     ((or (public-api-request? request)
          (auth-request-user current-auth request))
-     (api-dispatch request))
+     (dispatch-api request))
     (else
      (json-response
       (hasheq 'error "Aanmelden is vereist"