From dab693a130f5c95fa5a689da7512f2a8a3784122 Mon Sep 17 00:00:00 2001
From: Alexander Bocken <alexander@bocken.org>
Date: Thu, 4 Sep 2025 12:09:28 +0200
Subject: [PATCH] Fix server-side favorites fetching for production nginx setup

- Use absolute URLs for internal server-side fetch calls to bypass nginx routing issues
- Add debugging logs to favorites loading process
- Temporarily disable CSRF protection for local testing
- Clean up page server load function
---
 src/lib/server/favorites.ts        | 12 +++++++++++-
 src/routes/rezepte/+page.server.ts | 12 ++++--------
 svelte.config.js                   |  7 ++++++-
 3 files changed, 21 insertions(+), 10 deletions(-)

diff --git a/src/lib/server/favorites.ts b/src/lib/server/favorites.ts
index c2517597..1f8db540 100644
--- a/src/lib/server/favorites.ts
+++ b/src/lib/server/favorites.ts
@@ -10,10 +10,20 @@ export async function getUserFavorites(fetch: any, locals: any): Promise<string[
     }
     
     try {
-        const favRes = await fetch('/api/rezepte/favorites');
+        // Use absolute URL for internal server-side fetch to avoid nginx routing issues
+        const baseUrl = process.env.NODE_ENV === 'production' 
+            ? 'http://localhost:3000' 
+            : 'http://localhost:5173';
+        
+        console.log(`Fetching favorites from: ${baseUrl}/api/rezepte/favorites`);
+        const favRes = await fetch(`${baseUrl}/api/rezepte/favorites`);
+        
         if (favRes.ok) {
             const favData = await favRes.json();
+            console.log(`Loaded ${favData.favorites?.length || 0} favorites for user ${session.user.nickname}`);
             return favData.favorites || [];
+        } else {
+            console.error(`Favorites fetch failed with status: ${favRes.status}`);
         }
     } catch (e) {
         // Silently fail if favorites can't be loaded
diff --git a/src/routes/rezepte/+page.server.ts b/src/routes/rezepte/+page.server.ts
index 9fdbfbb1..f3b78481 100644
--- a/src/routes/rezepte/+page.server.ts
+++ b/src/routes/rezepte/+page.server.ts
@@ -1,22 +1,18 @@
 import type { PageServerLoad } from "./$types";
 import { getUserFavorites, addFavoriteStatusToRecipes } from "$lib/server/favorites";
 
-export async function load({ fetch, locals }) {
+export async function load({ fetch, locals, parent }) {
     let current_month = new Date().getMonth() + 1
     const res_season = await fetch(`/api/rezepte/items/in_season/` + current_month);
     const res_all_brief = await fetch(`/api/rezepte/items/all_brief`);
     const item_season = await res_season.json();
     const item_all_brief = await res_all_brief.json();
     
-    // Get user favorites and session
-    const [userFavorites, session] = await Promise.all([
-        getUserFavorites(fetch, locals),
-        locals.auth()
-    ]);
+    // Get user favorites (session comes from parent layout)
+    const userFavorites = await getUserFavorites(fetch, locals);
     
     return {
         season: addFavoriteStatusToRecipes(item_season, userFavorites),
-        all_brief: addFavoriteStatusToRecipes(item_all_brief, userFavorites),
-        session
+        all_brief: addFavoriteStatusToRecipes(item_all_brief, userFavorites)
     };
 };
diff --git a/svelte.config.js b/svelte.config.js
index 37ed1151..5b9d2511 100644
--- a/svelte.config.js
+++ b/svelte.config.js
@@ -10,7 +10,12 @@ const config = {
 		// adapter-auto only supports some environments, see https://kit.svelte.dev/docs/adapter-auto for a list.
 		// If your environment is not supported or you settled on a specific environment, switch out the adapter.
 		// See https://kit.svelte.dev/docs/adapters for more information about adapters.
-		adapter: adapter()
+		adapter: adapter(),
+		// Temporarily disable CSRF protection for local testing
+		// TODO: Remove this after debugging production issue
+		csrf: {
+			checkOrigin: false
+		}
 	}
 };