Stundenaufzeichnung/src/hooks.server.ts

import type { Handle } from "@sveltejs/kit";
import { error, redirect } from "@sveltejs/kit";

import SessionStore from "$lib/server/session_store"
import { init_db, close_db, get_user } from "$lib/server/database";

import Logs from "$lib/server/log";

async function init() {

	Logs.process.info("Initializing server");

	if (process.env.APP_USER_DATA_PATH == null) {
		throw new Error("APP_USER_DATA_PATH is not defined. Exiting.");
	}

	if (process.env.APP_TMP_USER_DATA_PATH == null) {
		throw new Error("APP_TMP_USER_DATA_PATH is not defined. Exiting.");
	}
	
	await init_db();

	Logs.process.info("Initializing of server complete")

}

function deinit() {
	close_db();
}

process.on('exit', (_) => {
	deinit();
	Logs.process.info("Exiting server")
	process.exit(0);
});

process.on('SIGINT', (_) => {
	Logs.process.info("Received SIGINT, shutting down")
	process.exit(0);
})

process.on("uncaughtExceptionMonitor", (error, origin) => {
	Logs.process.fatal(`Encountered uncaught exception (origin: ${origin}): ${error.name}${error.cause ? (" caused by "+error.cause) : ""}: ${error.message} `)
})

await init();

export let handle: Handle = async function ({ event, resolve }) {

	Logs.route.debug(`incoming ${event.request.method} request to: ${event.url.href} (route id: ${event.route.id})`);

	event.setHeaders({
		//"Strict-Transport-Security": "max-age=63072000; includeSubdomains; preload",
		"X-Frame-Options": "Deny",
		"X-Content-Type-Options": "nosniff",
		"Referrer-Policy": "strict-origin-when-cross-origin"
	})
	
	console.log(event.url.href)
	if (event.route.id == null) {
		Logs.route.info(`Tried to access a route which does not exist: ${event.url.href}`)
		return error(404, "This page does not exist.");
	}

	const token = event.cookies.get("session_id")
	const user = SessionStore.get_user_by_access_token(token ?? "")

	if (!token || !user) {
		if (event.request.method == "POST" && event.route.id != "/login") {
			return error(401, "Invalid Session");
		}

		if (token) {
			event.cookies.delete("session_id", { path: "/" });
		}

		if (event.route.id == "/login") {
			return await resolve(event);
		} else {
			event.url.searchParams.set("redirect", event.route.id);
			return redirect(302, `/login?${event.url.searchParams}`);
		}
	}

	event.locals.user = user;

	return await resolve(event);
}