move route check to hooks

1 files changed, 9 insertions, 2 deletions

diff --git a/src/hooks.server.js b/src/hooks.server.js
index a5b1eef3..cfe64cbc 100644
--- a/src/hooks.server.js
+++ b/src/hooks.server.js
@@ -1,16 +1,23 @@
-import { auth, get } from '$lib/utils';
+import { auth, get, protectedRoutes } from '$lib/utils';
 
 export async function handle({ event, resolve }) {
 	let token = event.cookies.get('token');
+	let { params, url } = event;
 
+	let user;
 	if (token) {
 		try {
-			event.locals.user = await get('/me', auth(event.cookies));
+			user = await get('/me', auth(event.cookies));
+			event.locals.user = user;
 		} catch (e) {
 			console.log('failed to get user', e);
 		}
 	}
 
+	if (protectedRoutes.find((p) => url.pathname.match(p))) {
+		if (user?.username !== params.username) return Response.redirect(url.origin + '/login', 307);
+	}
+
 	const response = await resolve(event);
 
 	return response;