Rotimi Best
291e233700
The use case for this is that if a person went from course page to invite page, and isn't authenticated then the user should be redirected to login page with a redirect query param
53 lines
1.2 KiB
TypeScript
53 lines
1.2 KiB
TypeScript
import type { Handle } from '@sveltejs/kit';
|
|
import { validateUser } from '$lib/utils/services/middlewares';
|
|
|
|
const PUBLIC_API_ROUTES = [
|
|
'/api/completion',
|
|
'student_prove_payment',
|
|
'teacher_student_buycourse',
|
|
'/api/polar',
|
|
'/api/lmz',
|
|
'/api/verify'
|
|
];
|
|
|
|
function isPublicRoute(pathname: string) {
|
|
return PUBLIC_API_ROUTES.some((route) => pathname.includes(route));
|
|
}
|
|
|
|
export const handle: Handle = async ({ event, resolve }) => {
|
|
const response = await resolve(event);
|
|
|
|
const { pathname } = event.url;
|
|
|
|
// Only validate API routes
|
|
if (!pathname.includes('/api')) {
|
|
return response;
|
|
}
|
|
|
|
// Skip public routes
|
|
if (isPublicRoute(pathname)) {
|
|
return response;
|
|
}
|
|
|
|
const accessToken = event.request.headers.get('Authorization')!;
|
|
|
|
try {
|
|
const user = await validateUser(accessToken);
|
|
|
|
response.headers.set('user_id', `${user.id}`);
|
|
} catch (error) {
|
|
if (error instanceof Error) {
|
|
if (error.message === 'Unauthenticated user') {
|
|
return new Response(
|
|
JSON.stringify({ code: 'unauthenticated', message: 'Unauthenticated user' }),
|
|
{
|
|
status: 401
|
|
}
|
|
);
|
|
}
|
|
}
|
|
}
|
|
|
|
return response;
|
|
};
|