AdventureLog/frontend/src/hooks.server.ts

import type { Handle } from '@sveltejs/kit';
import { sequence } from '@sveltejs/kit/hooks';
const PUBLIC_SERVER_URL = process.env['PUBLIC_SERVER_URL'];

export const authHook: Handle = async ({ event, resolve }) => {
	event.cookies.delete('csrftoken', { path: '/' });
	event.locals.subscription = null;
	event.locals.hasAccess = true;
	event.locals.cloudMode = false;
	try {
		// Image proxy requests can be very high-volume and do not need locals.user.
		if (event.url.pathname.startsWith('/immich/')) {
			return await resolve(event);
		}

		let sessionid = event.cookies.get('sessionid');

		if (!sessionid) {
			event.locals.user = null;
			return await resolve(event);
		}

		const serverEndpoint = PUBLIC_SERVER_URL || 'http://localhost:8000';

		const cookie = event.request.headers.get('cookie') || '';

		let userFetch = await event.fetch(`${serverEndpoint}/auth/current-user/`, {
			headers: {
				cookie
			}
		});

		if (!userFetch.ok) {
			// Preserve the session on transient backend failures (e.g. 429 throttling)
			// to avoid forcing users into a logout loop.
			if (userFetch.status === 429 || userFetch.status >= 500) {
				event.locals.user = null;
				return await resolve(event);
			}

			event.locals.user = null;
			event.cookies.delete('sessionid', { path: '/', secure: event.url.protocol === 'https:' });
			return await resolve(event);
		}

		if (userFetch.ok) {
			const payload = await userFetch.json();
			event.locals.user = payload.user || null;
			event.locals.subscription = payload.subscription || null;
			event.locals.hasAccess = payload.has_access ?? true;
			event.locals.cloudMode = payload.cloud_mode ?? false;
			const setCookieHeader = userFetch.headers.get('Set-Cookie');

			if (setCookieHeader) {
				// Regular expression to match sessionid cookie and its expiry
				const sessionIdRegex = /sessionid=([^;]+).*?expires=([^;]+)/;
				const match = setCookieHeader.match(sessionIdRegex);

				if (match) {
					const sessionId = match[1];
					const expiryString = match[2];
					const expiryDate = new Date(expiryString);

					// Set the sessionid cookie
					event.cookies.set('sessionid', sessionId, {
						path: '/',
						httpOnly: true,
						sameSite: 'lax',
						secure: event.url.protocol === 'https:',
						expires: expiryDate
					});
				}
			}
		} else {
			event.locals.user = null;
			event.cookies.delete('sessionid', { path: '/', secure: event.url.protocol === 'https:' });
		}
	} catch (error) {
		console.error('Error in authHook:', error);
		event.locals.user = null;
		event.locals.subscription = null;
		event.locals.hasAccess = true;
		event.locals.cloudMode = false;
		event.cookies.delete('sessionid', { path: '/', secure: event.url.protocol === 'https:' });
	}

	return await resolve(event);
};

export const themeHook: Handle = async ({ event, resolve }) => {
	let theme = event.url.searchParams.get('theme') || event.cookies.get('colortheme');

	if (theme) {
		return await resolve(event, {
			transformPageChunk: ({ html }) => html.replace('data-theme=""', `data-theme="${theme}"`)
		});
	}

	return await resolve(event);
};

// hook to get the langauge cookie and set the locale
export const i18nHook: Handle = async ({ event, resolve }) => {
	let locale = event.cookies.get('locale');
	if (!locale) {
		return await resolve(event);
	}
	event.locals.locale = locale; // Store the locale in locals
	return await resolve(event);
};

export const handle = sequence(authHook, themeHook, i18nHook);