migration to new backend

frontend/src/hooks.server.ts

@@ -0,0 +1,104 @@
+import type { Handle } from '@sveltejs/kit';
+import { sequence } from '@sveltejs/kit/hooks';
+const PUBLIC_SERVER_URL = process.env['PUBLIC_SERVER_URL'];
+import { fetchCSRFToken, tryRefreshToken } from '$lib/index.server';
+
+export const authHook: Handle = async ({ event, resolve }) => {
+	try {
+		let authCookie = event.cookies.get('auth');
+
+		if (!authCookie) {
+			event.locals.user = null;
+			const token = await tryRefreshToken(event.cookies.get('refresh') || '');
+			if (token) {
+				authCookie = token;
+				event.cookies.set('auth', authCookie, {
+					httpOnly: true,
+					sameSite: 'lax',
+					expires: new Date(Date.now() + 60 * 60 * 1000), // 60 minutes
+					path: '/'
+				});
+			} else {
+				return await resolve(event);
+			}
+		}
+
+		const serverEndpoint = PUBLIC_SERVER_URL || 'http://localhost:8000';
+
+		let userFetch = await event.fetch(`${serverEndpoint}/auth/user/`, {
+			headers: {
+				Cookie: `${authCookie}`
+			}
+		});
+
+		if (!userFetch.ok) {
+			console.log('Refreshing token');
+			const refreshCookie = event.cookies.get('refresh');
+
+			if (refreshCookie) {
+				const csrfToken = await fetchCSRFToken();
+				if (!csrfToken) {
+					console.error('Failed to fetch CSRF token');
+					event.locals.user = null;
+					return await resolve(event);
+				}
+
+				const refreshFetch = await event.fetch(`${serverEndpoint}/auth/token/refresh/`, {
+					method: 'POST',
+					headers: {
+						'X-CSRFToken': csrfToken,
+						'Content-Type': 'application/json'
+					},
+					body: JSON.stringify({ refresh: refreshCookie })
+				});
+
+				if (refreshFetch.ok) {
+					const refresh = await refreshFetch.json();
+					event.cookies.set('auth', 'auth=' + refresh.access, {
+						httpOnly: true,
+						sameSite: 'lax',
+						expires: new Date(Date.now() + 60 * 60 * 1000), // 60 minutes
+						path: '/'
+					});
+
+					userFetch = await event.fetch(`${serverEndpoint}/auth/user/`, {
+						headers: {
+							'X-CSRFToken': csrfToken,
+							Cookie: `auth=${refresh.access}`
+						}
+					});
+				}
+			}
+		}
+
+		if (userFetch.ok) {
+			const user = await userFetch.json();
+			event.locals.user = user;
+		} else {
+			event.locals.user = null;
+			event.cookies.delete('auth', { path: '/' });
+			event.cookies.delete('refresh', { path: '/' });
+		}
+	} catch (error) {
+		console.error('Error in authHook:', error);
+		event.locals.user = null;
+		event.cookies.delete('auth', { path: '/' });
+		event.cookies.delete('refresh', { path: '/' });
+	}
+
+	return await resolve(event);
+};
+
+export const themeHook: Handle = async ({ event, resolve }) => {
+	let theme = event.url.searchParams.get('theme') || event.cookies.get('colortheme');
+
+	if (theme) {
+		return await resolve(event, {
+			transformPageChunk: ({ html }) => html.replace('data-theme=""', `data-theme="${theme}"`)
+		});
+	}
+
+	return await resolve(event);
+};
+
+export const handle = sequence(authHook, themeHook);