From f2c620e37bfa0ac13acecb1ec933712a63088dcc Mon Sep 17 00:00:00 2001 From: bytedream Date: Tue, 29 Aug 2023 14:44:20 +0200 Subject: [PATCH] redirect to admin login when trying to access any admin page without valid cookies --- src/routes/admin/+layout.server.ts | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/routes/admin/+layout.server.ts b/src/routes/admin/+layout.server.ts index cfa05fc..84bb68c 100644 --- a/src/routes/admin/+layout.server.ts +++ b/src/routes/admin/+layout.server.ts @@ -1,10 +1,14 @@ import type { LayoutServerLoad } from './$types'; import { Admin, User } from '$lib/server/database'; import { getSession } from '$lib/server/session'; +import { redirect } from '@sveltejs/kit'; +import { env } from '$env/dynamic/public'; export const load: LayoutServerLoad = async ({ cookies }) => { const session = getSession(cookies); + if (session == null) throw redirect(302, `${env.PUBLIC_BASE_PATH}/admin/login`); + return { userCount: session?.permissions.userRead() ? await User.count() : null, adminCount: session?.permissions.adminRead() ? await Admin.count() : null