diff options
| author | Fuwn <[email protected]> | 2026-06-02 13:15:46 +0000 |
|---|---|---|
| committer | Fuwn <[email protected]> | 2026-06-02 13:15:46 +0000 |
| commit | 08c4f1831d8761ff443bbb9ad49c3feaedcf8480 (patch) | |
| tree | e4717c435009bfbaba8a7b01e365a7c41334d905 /src/routes/api/oauth/refresh/+server.ts | |
| parent | fix(security): replace RSS feed URL tokens with encrypted token (M5) (diff) | |
| download | due.moe-08c4f1831d8761ff443bbb9ad49c3feaedcf8480.tar.xz due.moe-08c4f1831d8761ff443bbb9ad49c3feaedcf8480.zip | |
chore: remove unused /api/oauth/refresh route (M5b)
Diffstat (limited to 'src/routes/api/oauth/refresh/+server.ts')
| -rw-r--r-- | src/routes/api/oauth/refresh/+server.ts | 29 |
1 files changed, 0 insertions, 29 deletions
diff --git a/src/routes/api/oauth/refresh/+server.ts b/src/routes/api/oauth/refresh/+server.ts deleted file mode 100644 index 49306076..00000000 --- a/src/routes/api/oauth/refresh/+server.ts +++ /dev/null @@ -1,29 +0,0 @@ -import { redirect } from "@sveltejs/kit"; -import { env } from "$env/dynamic/private"; -import { env as env2 } from "$env/dynamic/public"; - -export const GET = async ({ url, cookies }) => { - const formData = new FormData(); - - formData.append("grant_type", "refresh_token"); - formData.append("client_id", env2.PUBLIC_ANILIST_CLIENT_ID as string); - formData.append("client_secret", env.ANILIST_CLIENT_SECRET as string); - formData.append("refresh_token", url.searchParams.get("token") || ""); - - const newUser = await ( - await fetch("https://anilist.co/api/v2/oauth/token", { - method: "POST", - body: formData, - }) - ).json(); - - cookies.set("user", JSON.stringify(newUser), { - path: "/", - maxAge: 60 * 60 * 24 * 7, - httpOnly: false, - sameSite: "lax", - }); - - if (url.searchParams.get("redirect")) redirect(303, "/"); - else return Response.json(newUser); -}; |