protect endpoint with cookie
This commit is contained in:
@@ -20,7 +20,13 @@ export const load = async ({ cookies, params }) => {
|
|||||||
};
|
};
|
||||||
|
|
||||||
export const actions = {
|
export const actions = {
|
||||||
createTopic: async ({ request, params }) => {
|
createTopic: async ({ cookies, request, params }) => {
|
||||||
|
if (!cookies.get('token')) {
|
||||||
|
return { status: 401 };
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
const data = await request.formData();
|
const data = await request.formData();
|
||||||
|
|
||||||
const topic = await db
|
const topic = await db
|
||||||
@@ -42,7 +48,11 @@ export const actions = {
|
|||||||
.returning();
|
.returning();
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
addTopic: async ({ request, params }) => {
|
addTopic: async ({ cookies, request, params }) => {
|
||||||
|
if (!cookies.get('token')) {
|
||||||
|
return { status: 401 };
|
||||||
|
}
|
||||||
|
|
||||||
const data = await request.formData();
|
const data = await request.formData();
|
||||||
|
|
||||||
const topicId = Number(data.get('topic-id'));
|
const topicId = Number(data.get('topic-id'));
|
||||||
@@ -60,7 +70,11 @@ export const actions = {
|
|||||||
.returning();
|
.returning();
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
removeTopic: async ({ request, params }) => {
|
removeTopic: async ({ cookies, request, params }) => {
|
||||||
|
if (!cookies.get('token')) {
|
||||||
|
return { status: 401 };
|
||||||
|
}
|
||||||
|
|
||||||
const data = await request.formData();
|
const data = await request.formData();
|
||||||
|
|
||||||
const topicId = Number(data.get('topic-id'));
|
const topicId = Number(data.get('topic-id'));
|
||||||
@@ -77,7 +91,11 @@ export const actions = {
|
|||||||
);
|
);
|
||||||
}
|
}
|
||||||
},
|
},
|
||||||
updateProgress: async ({ request, params }) => {
|
updateProgress: async ({ cookies, request, params }) => {
|
||||||
|
if (!cookies.get('token')) {
|
||||||
|
return { status: 401 };
|
||||||
|
}
|
||||||
|
|
||||||
const data = await request.formData();
|
const data = await request.formData();
|
||||||
|
|
||||||
await db
|
await db
|
||||||
|
|||||||
@@ -3,7 +3,11 @@ import { tasks } from "$lib/db/schema"
|
|||||||
import { redirect } from "@sveltejs/kit"
|
import { redirect } from "@sveltejs/kit"
|
||||||
|
|
||||||
export const actions = {
|
export const actions = {
|
||||||
default: async ({ request }) => {
|
default: async ({ cookies, request }) => {
|
||||||
|
if (!cookies.get('token')) {
|
||||||
|
return { status: 401 };
|
||||||
|
}
|
||||||
|
|
||||||
const data = await request.formData()
|
const data = await request.formData()
|
||||||
|
|
||||||
const task = await db.insert(tasks).values({ name: data.get('name') }).returning()
|
const task = await db.insert(tasks).values({ name: data.get('name') }).returning()
|
||||||
|
|||||||
Reference in New Issue
Block a user