36 lines
784 B
TypeScript
36 lines
784 B
TypeScript
|
import { validateUser } from '$lib/utils/services/middlewares';
|
||
|
|
import type { Handle } from '@sveltejs/kit';
|
||
|
|
|
||
|
|
const PUBLIC_ROUTES = [
|
||
|
|
'/api/completion',
|
||
|
|
'student_prove_payment',
|
||
|
|
'teacher_student_buycourse',
|
||
|
|
'/api/polar'
|
||
|
|
];
|
||
|
|
|
||
|
|
function isPublicRoute(pathname: string) {
|
||
|
|
return PUBLIC_ROUTES.some((route) => pathname.includes(route));
|
||
|
|
}
|
||
|
|
|
||
|
|
export const handle: Handle = async ({ event, resolve }) => {
|
||
|
|
const response = await resolve(event);
|
||
|
|
|
||
|
|
const { pathname } = event.url;
|
||
|
|
|
||
|
|
// Only validate API routes
|
||
|
|
if (!pathname.includes('/api')) {
|
||
|
|
return response;
|
||
|
|
}
|
||
|
|
|
||
|
|
// Skip public routes
|
||
|
|
if (isPublicRoute(pathname)) {
|
||
|
|
return response;
|
||
|
|
}
|
||
|
|
|
||
|
|
const accessToken = event.request.headers.get('Authorization')!;
|
||
|
|
|
||
|
|
await validateUser(accessToken);
|
||
|
|
|
||
|
|
return response;
|
||
|
|
};
|