* feat: add README for @cio/db package and remove existingAccounts.json * load session, load profile and organization, add create profile hook * chore: cache session request The trick was passing all the cookies to the backend. Previously I was only passing the better-auth.session_token and not better-auth.session_data. Read about the difference here https://www.better-auth.com/docs/concepts/cookies#custom-cookies * feat: login, logout, onboarding, verify email, reset password. * feat: complete change email and email verification * feat: standardise how we make rpc calls and create org endpoints * fix ui errors * fix: handle potential undefined customerId and standardize avatar URL property * refactor: standardize custom domain handling and update telegram chat ID references * chore: add tailwind prefix to @cio/ui this fixed the media query issues because @cio/ui classes were overriding this dashboard tailwind build * chore: clean up org sidebar * chore: persist mode state * feat: implement order breadcrumbs * chore: upgrade to better auth 1.4 * chore: address common auth flow bugs and setup app for others to setup locally.
53 lines
1.3 KiB
TypeScript
53 lines
1.3 KiB
TypeScript
import { getSessionData } from '$lib/utils/services/auth/session';
|
|
import { type Handle, redirect } from '@sveltejs/kit';
|
|
import { isPublicApiRoute, isPublicRoute } from '$lib/utils/functions/routes/isPublicRoute';
|
|
import { ROUTE } from '$lib/utils/constants/routes';
|
|
|
|
export const handle: Handle = async (args) => {
|
|
const { event } = args;
|
|
const sessionData = await getSessionData(event.cookies);
|
|
|
|
if (sessionData) {
|
|
event.locals = sessionData;
|
|
}
|
|
|
|
// Handle API routes
|
|
if (event.url.pathname.includes('/api')) {
|
|
return handleAPIRoutes(args);
|
|
}
|
|
|
|
// Handle other routes (ui pages, etc.)
|
|
return handlePagesRoutes(args);
|
|
};
|
|
|
|
const handlePagesRoutes: Handle = async ({ event, resolve }) => {
|
|
const { pathname } = event.url;
|
|
|
|
if (isPublicRoute(pathname)) {
|
|
return resolve(event);
|
|
}
|
|
|
|
if (!event.locals.user) {
|
|
const shouldAddRedirectParam = !pathname.includes(ROUTE.LOGOUT);
|
|
const redirectPath = shouldAddRedirectParam ? `${ROUTE.LOGIN}?redirect=${pathname}` : ROUTE.LOGIN;
|
|
|
|
return redirect(303, redirectPath);
|
|
}
|
|
|
|
return resolve(event);
|
|
};
|
|
|
|
const handleAPIRoutes: Handle = async ({ event, resolve }) => {
|
|
const { pathname } = event.url;
|
|
|
|
if (isPublicApiRoute(pathname)) {
|
|
return resolve(event);
|
|
}
|
|
|
|
if (!event.locals.user) {
|
|
redirect(303, '/login');
|
|
}
|
|
|
|
return resolve(event);
|
|
};
|