Alexander/homepage
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

initial OIDC setup

Browse Source
This commit is contained in:
Alexander Bocken
2024-02-14 16:07:55 +01:00
parent 684a9b54f2
commit ca62e48f7b
28 changed files with 226 additions and 373 deletions
Download Patch File Download Diff File Expand all files Collapse all files

47
src/hooks.server.ts
View File

@@ -2,27 +2,28 @@ import { authenticateUser } from "$lib/js/authenticate"
import type { Handle } from "@sveltejs/kit"
import { redirect } from "@sveltejs/kit"
import { error } from "@sveltejs/kit"
export { handle } from "./auth"
export const handle : Handle = async({event, resolve}) => {
if(event.url.pathname.startsWith('/rezepte/edit') || event.url.pathname.startsWith('/rezepte/add')){
event.locals.user = await authenticateUser(event.cookies)
if(!event.locals.user){
throw redirect(303, "/login")
}
else if(!event.locals.user.access.includes("rezepte")){
throw error(401, "Your user does not have access to this page")
}
}
else if(event.url.pathname.startsWith('/abrechnung')){
event.locals.user = await authenticateUser(event.cookies)
if(!event.locals.user){
throw redirect(303, "/login")
}
else if(!event.locals.user.access.includes("abrechnung")){
throw error(401, "Your User does not have access to this page")
}
}
const response = await resolve(event)
return response
}
//export const handle : Handle = async({event, resolve}) => {
// if(event.url.pathname.startsWith('/rezepte/edit') || event.url.pathname.startsWith('/rezepte/add')){
// event.locals.user = await authenticateUser(event.cookies)
// if(!event.locals.user){
// throw redirect(303, "/login")
// }
// else if(!event.locals.user.access.includes("rezepte")){
// throw error(401, "Your user does not have access to this page")
// }
// }
// else if(event.url.pathname.startsWith('/abrechnung')){
// event.locals.user = await authenticateUser(event.cookies)
// if(!event.locals.user){
// throw redirect(303, "/login")
// }
// else if(!event.locals.user.access.includes("abrechnung")){
// throw error(401, "Your User does not have access to this page")
// }
// }
//
// const response = await resolve(event)
// return response
//}