export default defineEventHandler((event) => {
  const headers = getHeaders(event)

  // Authentik envía información del usuario en headers específicos
  const user = {
    username: headers['x-authentik-username'] || null,
    email: headers['x-authentik-email'] || null,
    name: headers['x-authentik-name'] || null,
    uid: headers['x-authentik-uid'] || null,
    groups: headers['x-authentik-groups'] ? headers['x-authentik-groups'].split(',') : [],
    authenticated: !!headers['x-authentik-username']
  }

  return user
})