Alexander Bocken
c8e542eec8
- Replace connect/disconnect pattern with persistent connection pool - Add explicit database initialization on server startup - Remove all dbDisconnect() calls from API endpoints to prevent race conditions - Fix MongoNotConnectedError when scheduler runs concurrently with API requests - Add connection pooling with proper MongoDB driver options - Add safety check for recipes array in favorites utility 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
100 lines
3.5 KiB
TypeScript
100 lines
3.5 KiB
TypeScript
import type { Handle, HandleServerError } from "@sveltejs/kit"
|
|
import { redirect } from "@sveltejs/kit"
|
|
import { error } from "@sveltejs/kit"
|
|
import { SvelteKitAuth } from "@auth/sveltekit"
|
|
import Authentik from "@auth/core/providers/authentik"
|
|
import { AUTHENTIK_ID, AUTHENTIK_SECRET, AUTHENTIK_ISSUER } from "$env/static/private";
|
|
import { sequence } from "@sveltejs/kit/hooks"
|
|
import * as auth from "./auth"
|
|
import { initializeScheduler } from "./lib/server/scheduler"
|
|
import { dbConnect } from "./utils/db"
|
|
import fs from 'fs'
|
|
import path from 'path'
|
|
|
|
// Initialize database connection on server startup
|
|
console.log('🚀 Server starting - initializing database connection...');
|
|
await dbConnect().then(() => {
|
|
console.log('✅ Database connected successfully');
|
|
// Initialize the recurring payment scheduler after DB is ready
|
|
initializeScheduler();
|
|
console.log('✅ Recurring payment scheduler initialized');
|
|
}).catch((error) => {
|
|
console.error('❌ Failed to connect to database on startup:', error);
|
|
// Don't crash the server - API routes will attempt reconnection
|
|
});
|
|
|
|
async function authorization({ event, resolve }) {
|
|
const session = await event.locals.auth();
|
|
|
|
// Protect rezepte routes
|
|
if (event.url.pathname.startsWith('/rezepte/edit') || event.url.pathname.startsWith('/rezepte/add')) {
|
|
if (!session) {
|
|
// Preserve the original URL the user was trying to access
|
|
const callbackUrl = encodeURIComponent(event.url.pathname + event.url.search);
|
|
redirect(303, `/login?callbackUrl=${callbackUrl}`);
|
|
}
|
|
else if (!session.user.groups.includes('rezepte_users')) {
|
|
error(403, {
|
|
message: 'Zugriff verweigert',
|
|
details: 'Du hast keine Berechtigung für diesen Bereich. Falls du glaubst, dass dies ein Fehler ist, wende dich bitte an Alexander.'
|
|
});
|
|
}
|
|
}
|
|
|
|
// Protect cospend routes and API endpoints
|
|
if (event.url.pathname.startsWith('/cospend') || event.url.pathname.startsWith('/api/cospend')) {
|
|
if (!session) {
|
|
// For API routes, return 401 instead of redirecting
|
|
if (event.url.pathname.startsWith('/api/cospend')) {
|
|
error(401, {
|
|
message: 'Anmeldung erforderlich',
|
|
details: 'Du musst angemeldet sein, um auf diesen Bereich zugreifen zu können.'
|
|
});
|
|
}
|
|
// For page routes, redirect to login
|
|
const callbackUrl = encodeURIComponent(event.url.pathname + event.url.search);
|
|
redirect(303, `/login?callbackUrl=${callbackUrl}`);
|
|
}
|
|
else if (!session.user.groups.includes('cospend')) {
|
|
error(403, {
|
|
message: 'Zugriff verweigert',
|
|
details: 'Du hast keine Berechtigung für diesen Bereich. Falls du glaubst, dass dies ein Fehler ist, wende dich bitte an Alexander.'
|
|
});
|
|
}
|
|
}
|
|
|
|
// If the request is still here, just proceed as normally
|
|
return resolve(event);
|
|
}
|
|
|
|
// Bible verse functionality for error pages
|
|
async function getRandomVerse(fetch: typeof globalThis.fetch): Promise<any> {
|
|
try {
|
|
const response = await fetch('/api/bible-quote');
|
|
if (!response.ok) {
|
|
throw new Error(`HTTP error! status: ${response.status}`);
|
|
}
|
|
return await response.json();
|
|
} catch (err) {
|
|
console.error('Error getting random verse:', err);
|
|
return null;
|
|
}
|
|
}
|
|
|
|
export const handleError: HandleServerError = async ({ error, event, status, message }) => {
|
|
console.error('Error occurred:', { error, status, message, url: event.url.pathname });
|
|
|
|
// Add Bible verse to error context
|
|
const bibleQuote = await getRandomVerse(event.fetch);
|
|
|
|
return {
|
|
message: message,
|
|
bibleQuote
|
|
};
|
|
};
|
|
|
|
export const handle: Handle = sequence(
|
|
auth.handle,
|
|
authorization
|
|
);
|