aboutsummaryrefslogtreecommitdiff
path: root/src/routes/api/notifications
diff options
context:
space:
mode:
authorFuwn <[email protected]>2026-03-03 08:57:37 -0800
committerFuwn <[email protected]>2026-03-03 08:57:48 -0800
commit39790c764eccc088b83d375a65fc89174d5dea01 (patch)
treeabd318702992d809913ff05444b731393bb971ab /src/routes/api/notifications
parentchore(effect): add v4 cookie decode foundation and tests (diff)
downloaddue.moe-39790c764eccc088b83d375a65fc89174d5dea01.tar.xz
due.moe-39790c764eccc088b83d375a65fc89174d5dea01.zip
refactor(effect): migrate core auth decode boundaries
Diffstat (limited to 'src/routes/api/notifications')
-rw-r--r--src/routes/api/notifications/subscribe/+server.ts12
-rw-r--r--src/routes/api/notifications/unsubscribe/+server.ts12
2 files changed, 6 insertions, 18 deletions
diff --git a/src/routes/api/notifications/subscribe/+server.ts b/src/routes/api/notifications/subscribe/+server.ts
index 5a1cacc4..499e2cf0 100644
--- a/src/routes/api/notifications/subscribe/+server.ts
+++ b/src/routes/api/notifications/subscribe/+server.ts
@@ -1,5 +1,6 @@
import { userIdentity } from "$lib/Data/AniList/identity";
import { setUserSubscription } from "$lib/Database/SB/User/notifications";
+import { decodeAuthCookieOrThrow } from "$lib/Effect/authCookie";
const unauthorised = new Response("Unauthorised", { status: 401 });
@@ -9,15 +10,8 @@ export const POST = async ({ cookies, request, url }) => {
if (!userCookie || !fingerprint) return unauthorised;
- const user = JSON.parse(userCookie);
- const userId = (
- await userIdentity({
- tokenType: user["token_type"],
- expiresIn: user["expires_in"],
- accessToken: user["access_token"],
- refreshToken: user["refresh_token"],
- })
- ).id;
+ const user = decodeAuthCookieOrThrow(userCookie);
+ const userId = (await userIdentity(user)).id;
if (!userId) return unauthorised;
diff --git a/src/routes/api/notifications/unsubscribe/+server.ts b/src/routes/api/notifications/unsubscribe/+server.ts
index 2db8b5c3..87f8b498 100644
--- a/src/routes/api/notifications/unsubscribe/+server.ts
+++ b/src/routes/api/notifications/unsubscribe/+server.ts
@@ -1,5 +1,6 @@
import { userIdentity } from "$lib/Data/AniList/identity";
import { deleteUserSubscription } from "$lib/Database/SB/User/notifications";
+import { decodeAuthCookieOrThrow } from "$lib/Effect/authCookie";
const unauthorised = new Response("Unauthorised", { status: 401 });
@@ -9,15 +10,8 @@ export const POST = async ({ cookies, url }) => {
if (!userCookie || !fingerprint) return unauthorised;
- const user = JSON.parse(userCookie);
- const userId = (
- await userIdentity({
- tokenType: user["token_type"],
- expiresIn: user["expires_in"],
- accessToken: user["access_token"],
- refreshToken: user["refresh_token"],
- })
- ).id;
+ const user = decodeAuthCookieOrThrow(userCookie);
+ const userId = (await userIdentity(user)).id;
if (!userId) return unauthorised;