svelte-clerk/dist/server/withClerkHandler.js

Svelte Clerk is the easiest way to add authentication and user management to your Svelte and SvelteKit applications. Add sign up, sign in, and profile management to your application in minutes.

import {} from '@sveltejs/kit';
import { clerkClient } from './clerkClient.js';
import * as constants from './constants.js';
import { AuthStatus, createClerkRequest } from '@clerk/backend/internal';
import { parse, splitCookiesString } from 'set-cookie-parser';
import { createCurrentUser } from './currentUser.js';
import { handleNetlifyCacheInDevInstance } from '@clerk/shared/netlifyCacheHandler';
export function withClerkHandler(middlewareOptions) {
    return async ({ event, resolve }) => {
        const { debug = false, ...options } = middlewareOptions ?? {};
        const clerkWebRequest = createClerkRequest(event.request);
        if (debug) {
            console.log('[svelte-clerk] ' + JSON.stringify(clerkWebRequest.toJSON()));
        }
        const requestState = await clerkClient.authenticateRequest(clerkWebRequest, {
            ...options,
            secretKey: options?.secretKey ?? constants.SECRET_KEY,
            publishableKey: options?.publishableKey ?? constants.PUBLISHABLE_KEY,
            acceptsToken: 'session_token'
        });
        const locationHeader = requestState.headers.get(constants.Headers.Location);
        if (locationHeader) {
            if (debug) {
                console.log('[svelte-clerk] Handshake redirect triggered');
            }
            handleNetlifyCacheInDevInstance({
                locationHeader,
                publishableKey: requestState.publishableKey,
                requestStateHeaders: requestState.headers
            });
            return new Response(null, { status: 307, headers: requestState.headers });
        }
        if (requestState.status === AuthStatus.Handshake) {
            throw new Error('[svelte-clerk] Handshake status without redirect');
        }
        const auth = (options) => requestState.toAuth(options);
        decorateLocals(event, auth);
        if (debug) {
            console.log('[svelte-clerk] ' + JSON.stringify(auth()));
        }
        decorateHeaders(event, requestState.headers);
        return resolve(event);
    };
}
function decorateHeaders(event, headers) {
    const setCookie = headers.get('set-cookie');
    // We separate cookie setting logic because SvelteKit
    // does not allow setting cookies with setHeaders.
    if (setCookie) {
        const splitCookies = splitCookiesString(setCookie);
        const parsedCookies = parse(splitCookies);
        parsedCookies.forEach((parsedCookie) => {
            const { name, value, ...options } = parsedCookie;
            event.cookies.set(name, value, options);
        });
        headers.delete('set-cookie');
    }
    event.setHeaders(Object.fromEntries(headers));
}
function decorateLocals(event, auth) {
    event.locals.auth = auth;
    event.locals.currentUser = createCurrentUser(auth());
}