sveltekit-auth-example 1.0.31 → 1.0.33

package/CHANGELOG.md

@@ -1,6 +1,15 @@
 # Backlog
 * Add password complexity checking on /register and /profile pages (only checks for length currently despite what the pages say)
 
+# 1.0.33
+* Update dependencies
+
+# 1.0.32
+* Remove window from reference to google.accounts
+* Add apple-touch-icon.png
+* Update dependencies
+* Remove dead code
+
 # 1.0.31
 * Cleanup
 * Update SvelteKit

package/README.md

@@ -27,12 +27,12 @@ The website supports two types of authentication:
 
 > There is some overhead to checking the user session in a database each time versus using a JWT; however, validating each request avoids problems discussed in [this article](https://redis.com/blog/json-web-tokens-jwt-are-dangerous-for-user-sessions/) and [this one](https://scotch.io/bar-talk/why-jwts-suck-as-session-tokens). For a high-volume website, I would use Redis or the equivalent.
 
-The forgot password / password reset functionality uses a JWT and [**SendInBlue**](https://www.sendinblue.com) to send the email. You would need to have a **SendInBlue** account and set three environmental variables. Email sending is in /src/routes/auth/forgot.ts. This code could easily be replaced by nodemailer or something similar. Note: I have no affliation with **SendInBlue** (used their API because on another project).
+The forgot password / password reset functionality uses a JWT and [**SendInBlue**](https://www.sendinblue.com) to send the email. You would need to have a **SendInBlue** account and set three environmental variables. Email sending is in /src/routes/auth/forgot.ts. This code could easily be replaced by nodemailer or something similar. Note: I have no affliation with **SendInBlue** (used their API in another project).
 
 ## Prerequisites
 - PostgreSQL 14.5 or higher
 - Node.js 18.11.0 or higher
-- npm 8.19.2 or higher
+- npm 9.1.1 or higher
 - Google API client
 - SendInBlue account (only used for emailing password reset link - the sample can run without it but forgot password will not work)
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "sveltekit-auth-example",
   "description": "SvelteKit Authentication Example",
-  "version": "1.0.31",
+  "version": "1.0.33",
   "private": false,
   "author": "Nate Stuyvesant",
   "license": "https://github.com/nstuyvesant/sveltekit-auth-example/blob/master/LICENSE",
@@ -32,8 +32,8 @@
 		"format": "prettier --write ."
   },
   "engines": {
-    "node": "~18.11.0",
-    "npm": "^8.19.2"
+    "node": ">=18.11.0",
+    "npm": "^9.1.1"
   },
   "type": "module",
   "dependencies": {
@@ -42,26 +42,26 @@
   "devDependencies": {
     "@sveltejs/adapter-node": "latest",
     "@sveltejs/kit": "latest",
-    "@types/bootstrap": "5.2.5",
+    "@types/bootstrap": "5.2.6",
     "@types/google.accounts": "0.0.2",
     "@types/jsonwebtoken": "^8.5.9",
     "@types/pg": "^8.6.5",
-    "@typescript-eslint/eslint-plugin": "^5.42.0",
-    "@typescript-eslint/parser": "^5.42.0",
+    "@typescript-eslint/eslint-plugin": "^5.42.1",
+    "@typescript-eslint/parser": "^5.42.1",
     "bootstrap": "^5.2.2",
-    "eslint": "^8.26.0",
+    "eslint": "^8.27.0",
     "eslint-config-prettier": "^8.5.0",
     "eslint-plugin-svelte3": "^4.0.0",
-    "google-auth-library": "^8.6.0",
+    "google-auth-library": "^8.7.0",
     "jsonwebtoken": "^8.5.1",
     "prettier": "^2.7.1",
     "prettier-plugin-svelte": "^2.8.0",
-    "sass": "^1.55.0",
-    "svelte": "^3.52.0",
+    "sass": "^1.56.1",
+    "svelte": "^3.53.1",
     "svelte-check": "^2.9.2",
     "svelte-preprocess": "^4.10.7",
     "tslib": "^2.4.1",
     "typescript": "^4.8.4",
-    "vite": "^3.2.2"
+    "vite": "^3.2.3"
   }
 }

package/src/app.d.ts

@@ -40,19 +40,6 @@ interface Credentials {
   password: string
 }
 
-interface GoogleCredentialResponse {
-	credential: string
-	select_by:
-		| 'auto'
-		| 'user'
-		| 'user_1tap'
-		| 'user_2tap'
-		| 'btn'
-		| 'btn_confirm'
-		| 'btn_add_session'
-		| 'btn_confirm_add_session'
-}
-
 interface MessageAddressee {
   email: string
   name?: string

package/src/lib/google.ts

@@ -22,7 +22,7 @@ export function initializeGoogleAccounts() {
 	})
 
   if (!initialized) {
-    window.google.accounts.id.initialize({
+    google.accounts.id.initialize({
       client_id: PUBLIC_GOOGLE_CLIENT_ID,
       callback: googleCallback
     })

package/src/routes/+layout.svelte

@@ -35,27 +35,6 @@
     if (!$loginSession) google.accounts.id.prompt()
 	})
 
-  async function googleCallback(response: google.accounts.id.CredentialResponse) {
-		const res = await fetch('/auth/google', {
-			method: 'POST',
-			headers: {
-				'Content-Type': 'application/json'
-			},
-			body: JSON.stringify({ token: response.credential })
-		})
-
-		if (res.ok) {
-			const fromEndpoint = await res.json()
-			loginSession.set(fromEndpoint.user) // update loginSession store
-			const { role } = fromEndpoint.user
-      const referrer = $page.url.searchParams.get('referrer')
-			if (referrer) return goto(referrer)
-			if (role === 'teacher') return goto('/teachers')
-			if (role === 'admin') return goto('/admin')
-			if (location.pathname === '/login') goto('/') // logged in so go home
-		}
-	}
-
   async function logout() {
 		// Request server delete httpOnly cookie called loginSession
 		const url = '/auth/logout'