feat(auth): server-side sessions replacing Basic-auth cookie promotion (#523) #612

Merged
marcel merged 32 commits from feat/issue-523-server-side-sessions into main 2026-05-17 23:08:22 +02:00
Showing only changes of commit 9f1e2c9ff5 - Show all commits

View File

@@ -1,5 +1,5 @@
import * as Sentry from '@sentry/sveltekit';
import { redirect, type Handle, type HandleFetch } from '@sveltejs/kit';
import { isRedirect, redirect, type Handle, type HandleFetch } from '@sveltejs/kit';
import { paraglideMiddleware } from '$lib/paraglide/server';
import { sequence } from '@sveltejs/kit/hooks';
import { env } from 'process';
@@ -87,10 +87,9 @@ const userGroup: Handle = async ({ event, resolve }) => {
}
}
} catch (error) {
// Don't swallow SvelteKit redirects — they're thrown as objects with a `status` field.
if (error instanceof Object && 'status' in error && 'location' in error) {
throw error;
}
// Re-throw SvelteKit redirects (e.g. the /login?reason=expired throw above)
// using the official guard rather than duck-typing on the error shape.
if (isRedirect(error)) throw error;
console.error('Error fetching user in hook:', error);
}