protect endpoint with cookie

This commit is contained in:
2025-02-24 20:27:42 +01:00
parent 122830a3f5
commit 002f959b44
2 changed files with 27 additions and 5 deletions

View File

@@ -20,7 +20,13 @@ export const load = async ({ cookies, params }) => {
}; };
export const actions = { export const actions = {
createTopic: async ({ request, params }) => { createTopic: async ({ cookies, request, params }) => {
if (!cookies.get('token')) {
return { status: 401 };
}
const data = await request.formData(); const data = await request.formData();
const topic = await db const topic = await db
@@ -42,7 +48,11 @@ export const actions = {
.returning(); .returning();
} }
}, },
addTopic: async ({ request, params }) => { addTopic: async ({ cookies, request, params }) => {
if (!cookies.get('token')) {
return { status: 401 };
}
const data = await request.formData(); const data = await request.formData();
const topicId = Number(data.get('topic-id')); const topicId = Number(data.get('topic-id'));
@@ -60,7 +70,11 @@ export const actions = {
.returning(); .returning();
} }
}, },
removeTopic: async ({ request, params }) => { removeTopic: async ({ cookies, request, params }) => {
if (!cookies.get('token')) {
return { status: 401 };
}
const data = await request.formData(); const data = await request.formData();
const topicId = Number(data.get('topic-id')); const topicId = Number(data.get('topic-id'));
@@ -77,7 +91,11 @@ export const actions = {
); );
} }
}, },
updateProgress: async ({ request, params }) => { updateProgress: async ({ cookies, request, params }) => {
if (!cookies.get('token')) {
return { status: 401 };
}
const data = await request.formData(); const data = await request.formData();
await db await db

View File

@@ -3,7 +3,11 @@ import { tasks } from "$lib/db/schema"
import { redirect } from "@sveltejs/kit" import { redirect } from "@sveltejs/kit"
export const actions = { export const actions = {
default: async ({ request }) => { default: async ({ cookies, request }) => {
if (!cookies.get('token')) {
return { status: 401 };
}
const data = await request.formData() const data = await request.formData()
const task = await db.insert(tasks).values({ name: data.get('name') }).returning() const task = await db.insert(tasks).values({ name: data.get('name') }).returning()