sveltekit-auth-example 1.0.13 → 1.0.16

package/src/routes/auth/[slug].ts

@@ -1,93 +0,0 @@
-import type { RequestHandler } from '@sveltejs/kit'
-import { query } from '../_db'
-
-export const POST: RequestHandler = async event => {
-  const { slug } = event.params
-
-  let result
-  let sql
-
-  try {
-    switch (slug) {
-      case 'logout':
-        if (event.locals.user) { // if user is null, they are logged out anyway (session might have ended)
-          sql = `CALL delete_session($1);`
-          result = await query(sql, [event.locals.user.id])
-        }
-        return {
-          status: 200,
-          headers: {
-            'Set-Cookie': `session=; Path=/; SameSite=Lax; HttpOnly; Expires=${new Date().toUTCString()}`
-          },
-          body: {
-            message: 'Logout successful.'
-          }
-        }
-      case 'login': 
-        sql = `SELECT authenticate($1) AS "authenticationResult";`
-        break
-      case 'register':
-        sql = `SELECT register($1) AS "authenticationResult";`
-        break
-
-      default:
-        return {
-          status: 404,
-          body: {
-            message: 'Invalid endpoint.',
-            user: null
-          }
-        }
-    }
-
-    // Only /auth/login and /auth/register at this point
-    const body = await event.request.json()
-
-    // While client checks for these to be non-null, register() in the database does not
-    if (slug == 'register' && (!body.email || !body.password || !body.firstName || !body.lastName))
-    return {
-      status: 400,
-      body: {
-        message: 'Please supply all required fields: email, password, first and last name.',
-        user: null
-      }
-    }
-
-    result = await query(sql, [JSON.stringify(body)])
-  } catch (error) {
-    return {
-      status: 503,
-      body: {
-        message: 'Could not communicate with database.',
-        user: null
-      }
-    }
-  }
-
-  const { authenticationResult }: { authenticationResult: AuthenticationResult } = result.rows[0]
-
-  if (!authenticationResult.user) {
-    return {
-      status: authenticationResult.statusCode,
-      body: {
-        message: authenticationResult.status,
-        user: null,
-        sessionId: null
-      }
-    }
-  }
-
-  // Prevent hooks.ts:handle() from deleting cookie we just set
-  event.locals.user = authenticationResult.user
-
-  return {
-    status: authenticationResult.statusCode,
-    headers: { // database expires sessions in 2 hours (could do it here too)
-      'Set-Cookie': `session=${authenticationResult.sessionId}; Path=/; SameSite=Lax; HttpOnly;`
-    },
-    body: {
-      message: authenticationResult.status,
-      user: authenticationResult.user,
-    }
-  }
-}

package/src/routes/teachers.svelte

@@ -1,39 +0,0 @@
-<script context="module" lang="ts">
-	import type { Load } from '@sveltejs/kit'
-
-	export const load: Load = async ({ fetch, session }) => {
-    const authorized = ['admin', 'teacher']
-		if (!session.user || !authorized.includes(session.user.role)) {
-			return {
-				status: 302,
-				redirect: '/login?referrer=/teachers'
-			}
-		}
-
-		const url = '/api/v1/teacher'
-		const res = await fetch(url, {
-			method: 'GET',
-			headers: { 'Content-Type': 'application/json' }
-		})
-
-		// if !res.ok, error is returned as message
-		const { message } = await res.json()
-		return {
-			props: {
-				message
-			}
-		}
-	}
-</script>
-
-<script lang="ts">
-	export let message = ''
-</script>
-
-<svelte:head>
-  <title>Teachers</title>
-</svelte:head>
-
-<h1>Teachers</h1>
-<h4>Teacher Or Admin Role</h4>
-<p>{message}</p>