89 lines
2.3 KiB
TypeScript
89 lines
2.3 KiB
TypeScript
import type { Handle } from "@sveltejs/kit";
|
|
import { error, redirect } from "@sveltejs/kit";
|
|
|
|
import SessionStore from "$lib/server/session_store"
|
|
import { init_db, close_db, get_user } from "$lib/server/database";
|
|
|
|
import Logs from "$lib/server/log";
|
|
|
|
async function init() {
|
|
|
|
Logs.process.info("Initializing server");
|
|
|
|
if (process.env.APP_USER_DATA_PATH == null) {
|
|
throw new Error("APP_USER_DATA_PATH is not defined. Exiting.");
|
|
}
|
|
|
|
if (process.env.APP_TMP_USER_DATA_PATH == null) {
|
|
throw new Error("APP_TMP_USER_DATA_PATH is not defined. Exiting.");
|
|
}
|
|
|
|
await init_db();
|
|
|
|
Logs.process.info("Initializing of server complete")
|
|
|
|
}
|
|
|
|
function deinit() {
|
|
close_db();
|
|
}
|
|
|
|
process.on('exit', (_) => {
|
|
deinit();
|
|
Logs.process.info("Exiting server")
|
|
process.exit(0);
|
|
});
|
|
|
|
process.on('SIGINT', (_) => {
|
|
Logs.process.info("Received SIGINT, shutting down")
|
|
process.exit(0);
|
|
})
|
|
|
|
process.on("uncaughtExceptionMonitor", (error, origin) => {
|
|
Logs.process.fatal(`Encountered uncaught exception (origin: ${origin}): ${error.name}${error.cause ? (" caused by "+error.cause) : ""}: ${error.message} `)
|
|
})
|
|
|
|
await init();
|
|
|
|
export let handle: Handle = async function ({ event, resolve }) {
|
|
|
|
Logs.route.debug(`incoming ${event.request.method} request to: ${event.url.href} (route id: ${event.route.id})`);
|
|
|
|
event.setHeaders({
|
|
//"Strict-Transport-Security": "max-age=63072000; includeSubdomains; preload",
|
|
"X-Frame-Options": "Deny",
|
|
"X-Content-Type-Options": "nosniff",
|
|
"Referrer-Policy": "strict-origin-when-cross-origin"
|
|
})
|
|
|
|
console.log(event.url.href)
|
|
if (event.route.id == null) {
|
|
Logs.route.info(`Tried to access a route which does not exist: ${event.url.href}`)
|
|
return error(404, "This page does not exist.");
|
|
}
|
|
|
|
const token = event.cookies.get("session_id")
|
|
const user = SessionStore.get_user_by_access_token(token ?? "")
|
|
|
|
if (!token || !user) {
|
|
if (event.request.method == "POST" && event.route.id != "/login") {
|
|
return error(401, "Invalid Session");
|
|
}
|
|
|
|
if (token) {
|
|
event.cookies.delete("session_id", { path: "/" });
|
|
}
|
|
|
|
if (event.route.id == "/login") {
|
|
return await resolve(event);
|
|
} else {
|
|
event.url.searchParams.set("redirect", event.route.id);
|
|
return redirect(302, `/login?${event.url.searchParams}`);
|
|
}
|
|
}
|
|
|
|
event.locals.user = user;
|
|
|
|
return await resolve(event);
|
|
}
|