Robi Comments - Answer Overflow

Robi

Posts Comments

BABetter Auth

•Created by Acro on 2/9/2025 in #help

SvelteKit Example

You can get the url and throw redirects from the hook with this method too , no ?

9 replies

BABetter Auth

•Created by Acro on 2/9/2025 in #help

SvelteKit Example

or if you're using just the client and the instance isnt on your sveltekit but on an express server somewhere else hooks.server.ts

import type { Handle } from '@sveltejs/kit';

export const handle: Handle = async ({ event, resolve }) => {

  const session = await authClient.getSession({
    fetchOptions: {
      headers: event.request.headers
    }
  });

  event.locals.session = session?.data?.session;
  event.locals.user = session?.data?.user;

  const response = await resolve(event);
  return response;
};

import type { Handle } from '@sveltejs/kit';

export const handle: Handle = async ({ event, resolve }) => {

  const session = await authClient.getSession({
    fetchOptions: {
      headers: event.request.headers
    }
  });

  event.locals.session = session?.data?.session;
  event.locals.user = session?.data?.user;

  const response = await resolve(event);
  return response;
};

then to protect a route ( anything in (admin) for example )

import type { LayoutServerLoad } from './$types';
import { error, redirect } from '@sveltejs/kit';

export const load: LayoutServerLoad = async ({ locals }) => {

    console.log('Admin Layout Server load ');

    const session = locals.session;
    const user = locals.user;

    if (!session) {
        console.log('Admin : No session');
        throw redirect(302, '/login');
    }
    if (user?.role !== 'admin') {
        console.log('Admin : Not admin');
        throw error(403, 'Forbidden');
    }
};

import type { LayoutServerLoad } from './$types';
import { error, redirect } from '@sveltejs/kit';

export const load: LayoutServerLoad = async ({ locals }) => {

    console.log('Admin Layout Server load ');

    const session = locals.session;
    const user = locals.user;

    if (!session) {
        console.log('Admin : No session');
        throw redirect(302, '/login');
    }
    if (user?.role !== 'admin') {
        console.log('Admin : Not admin');
        throw error(403, 'Forbidden');
    }
};

9 replies

BABetter Auth