pantheon/hestia
2
0
Fork 0
Code Issues 23 Pull requests Projects Releases Packages Wiki Activity Actions

check user is present

Browse source 
A session can exist without a user, if the user was recently deleted
This commit is contained in:
Benjamin Palko 2024-12-20 11:02:48 -05:00
parent a4deed23fe
commit 3691bd6f8f
2 changed files with 4 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/lib/server/auth/index.ts
View file

@ -11,7 +11,7 @@ export async function validateSession(event: ServerLoadEvent) {
where: { id: sessionId },
include: { user: true },
});
if (!session) {
if (!session || !session.user) {
redirect(300, '/login');
}
const expiry = session.expiresAt;
@ -19,4 +19,4 @@ export async function validateSession(event: ServerLoadEvent) {
redirect(300, '/login');
}
return session;
}
}

9
src/routes/+page.server.ts
View file

@ -1,10 +1,5 @@
import { validateSession } from '$lib/server/auth/index.js';
export async function load(event) {
const {
user: { password: _, ...rest },
} = await validateSession(event);
return {
user: rest,
};
}
await validateSession(event);
}