export default defineEventHandler((event) => {
  const sessionCookie = getCookie(event, 'session')
  
  if (!sessionCookie) {
    return { user: null }
  }
  
  try {
    const session = JSON.parse(sessionCookie)
    
    // Check if session is expired
    if (session.user.expiresAt && session.user.expiresAt < Date.now() / 1000) {
      deleteCookie(event, 'session')
      return { user: null }
    }
    
    return session
  } catch (error) {
    deleteCookie(event, 'session')
    return { user: null }
  }
})