docs(richtlinien): document why prerender=true is auth-safe
handleAuth in hooks.server.ts is in the sequence() chain and redirects unauthenticated users at runtime regardless of prerender. Adding a comment so the next reader doesn't mistake this for a security hole. (Markus/Nora) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
@@ -1 +1,6 @@
|
|||||||
|
// prerender = true is safe here: hooks.server.ts exports
|
||||||
|
// handle = sequence(userGroup, handleAuth, ...)
|
||||||
|
// where handleAuth redirects all non-public paths to /login at runtime.
|
||||||
|
// Prerendered HTML is served, but the browser still hits handleAuth on
|
||||||
|
// every navigation — unauthenticated users are redirected before seeing content.
|
||||||
export const prerender = true;
|
export const prerender = true;
|
||||||
|
|||||||
Reference in New Issue
Block a user