aboutsummaryrefslogtreecommitdiff
path: root/src/routes/api/configuration/+server.ts
diff options
context:
space:
mode:
authorFuwn <[email protected]>2026-03-28 06:02:54 +0000
committerFuwn <[email protected]>2026-03-28 06:04:13 +0000
commit8a99dd5c4b74a4ea2ce715aed5e517022621f05c (patch)
tree56e24474d2240e77887450e0e52617e358ac3379 /src/routes/api/configuration/+server.ts
parentfix(cache): respect AniList media list recache windows (diff)
downloaddue.moe-8a99dd5c4b74a4ea2ce715aed5e517022621f05c.tar.xz
due.moe-8a99dd5c4b74a4ea2ce715aed5e517022621f05c.zip
fix(auth): ignore malformed user cookies
Diffstat (limited to 'src/routes/api/configuration/+server.ts')
-rw-r--r--src/routes/api/configuration/+server.ts10
1 files changed, 7 insertions, 3 deletions
diff --git a/src/routes/api/configuration/+server.ts b/src/routes/api/configuration/+server.ts
index 786e8333..306e1285 100644
--- a/src/routes/api/configuration/+server.ts
+++ b/src/routes/api/configuration/+server.ts
@@ -1,11 +1,11 @@
import { Schema } from "effect";
-import { userIdentity } from "$lib/Data/AniList/identity";
+import { safeUserIdentity } from "$lib/Data/AniList/identity";
import {
deleteUserConfiguration,
getUserConfiguration,
setUserConfiguration,
} from "$lib/Database/SB/User/configuration";
-import { decodeAuthCookieOrThrow } from "$lib/Effect/authCookie";
+import { decodeAuthCookieOrNull } from "$lib/Effect/authCookie";
import { decodeRequestJsonOrThrow } from "$lib/Effect/requestBody";
import { appOriginHeaders } from "$lib/Utility/appOrigin";
@@ -18,7 +18,11 @@ const authenticatedUserId = async (cookies: {
if (!userCookie) return null;
- return (await userIdentity(decodeAuthCookieOrThrow(userCookie))).id;
+ const user = decodeAuthCookieOrNull(userCookie);
+
+ if (!user) return null;
+
+ return (await safeUserIdentity(user))?.id ?? null;
};
export const GET = async ({ cookies, url }) => {