1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
|
import { ipStore } from "$lib/server/ip";
import { setIpGetter } from "$lib/utils";
import { redirect } from "@sveltejs/kit";
import type { Handle } from "@sveltejs/kit";
setIpGetter(() => ipStore.getStore());
export const handle: Handle = async ({ event, resolve }) => {
let ip =
event.request.headers.get("cf-connecting-ip") ||
event.request.headers.get("x-forwarded-for")?.split(",")[0]?.trim();
if (!ip) {
try {
ip = event.getClientAddress();
} catch {
ip = "127.0.0.1";
}
}
// Sync aid cookie from URL params
try {
const aid = event.url.searchParams.get("aid");
if (aid) event.cookies.set("aid", aid, { path: "/", maxAge: 86400, httpOnly: false });
} catch {}
// Auth check for (app) routes
const isAppRoute = event.route.id?.startsWith("/(app)");
const token = event.cookies.get("token");
const { pathname } = event.url;
const isSweep = pathname.match(/^\/fund\/[^/]+\/sweep/);
const isLogout = pathname === "/logout";
if (isLogout) {
// Clear token before layout load to prevent infinite redirect loops
event.cookies.set("token", "", { expires: new Date(0), path: "/" });
} else if (isAppRoute && !token && !isSweep) {
redirect(307, "/login");
}
return ipStore.run(ip, async () => {
const response = await resolve(event);
const { pathname } = event.url;
const hasToken = event.cookies.get("token");
if (!hasToken) {
const cacheTTL: Record<string, number> = {
"/": 300,
"/bounties": 300,
"/privacy": 86400,
"/removal": 86400,
"/forgot": 3600,
};
const ttl = cacheTTL[pathname];
if (ttl) {
response.headers.set("CDN-Cache-Control", `max-age=${ttl}`);
}
}
return response;
});
};
|
