src/lib/server/auth/index.ts

@@ -0,0 +1,22 @@
+import { redirect, type ServerLoadEvent } from '@sveltejs/kit';
+import dayjs from 'dayjs';
+import { prisma } from '../prisma';
+
+export async function validateSession(event: ServerLoadEvent) {
+	const sessionId = event.cookies.get('auth_session');
+	if (!sessionId) {
+		redirect(300, '/login');
+	}
+	const session = await prisma.session.findUnique({
+		where: { id: sessionId },
+		include: { user: true },
+	});
+	if (!session) {
+		redirect(300, '/login');
+	}
+	const expiry = session.expiresAt;
+	if (dayjs(expiry).isBefore(dayjs())) {
+		redirect(300, '/login');
+	}
+	return session;
+}

src/routes/+page.server.ts

@@ -1,18 +1,10 @@
-import { prisma } from '$lib/server/prisma';
+import { validateSession } from '$lib/server/auth/index.js';
-import { redirect } from '@sveltejs/kit';
 
 export async function load(event) {
-	const sessionId = event.cookies.get('auth_session');
+	const {
-	if (!sessionId) {
+		user: { password: _, ...rest },
-		redirect(303, '/login');
+	} = await validateSession(event);
-	}
+	return {
-	const user = await prisma.session.findUnique({
+		user: rest,
-		where: {
+	};
-			id: sessionId,
-		},
-	});
-	if (!user) {
-		redirect(300, '/login');
-	}
-	return {};
 }

src/routes/app/+layout.server.ts

@@ -1,25 +1,9 @@
-import { prisma } from '$lib/server/prisma';
+import { validateSession } from '$lib/server/auth/index.js';
-import { redirect } from '@sveltejs/kit';
-import dayjs from 'dayjs';
 
 export async function load(event) {
-	const sessionId = event.cookies.get('auth_session');
+	const {
-	if (!sessionId) {
+		user: { password: _, ...rest },
-		redirect(300, '/login');
+	} = await validateSession(event);
-	}
-	const session = await prisma.session.findUnique({
-		where: { id: sessionId },
-		include: { user: true },
-	});
-	if (!session) {
-		redirect(300, '/login');
-	}
-	const expiry = session.expiresAt;
-	if (dayjs(expiry).isBefore(dayjs())) {
-		redirect(300, '/login');
-	}
-
-	const { password: _, ...rest } = session.user;
 	return {
 		user: rest,
 	};