Fix auth hook so it returns forbidden if the user is authenticated but not allowed to hit an endpoint.
This commit is contained in:
@ -5,18 +5,16 @@ import {
|
||||
badRequestResponse,
|
||||
forbiddenResponse,
|
||||
serverErrorResponse,
|
||||
singleResponse
|
||||
singleResponse,
|
||||
} from "$lib/server/responseBodies";
|
||||
import type { RequestHandler } from "@sveltejs/kit";
|
||||
|
||||
export const POST: RequestHandler = async ({ request }): Promise<Response> => {
|
||||
let body: unknown;
|
||||
|
||||
console.log("here");
|
||||
try {
|
||||
body = await request.json();
|
||||
} catch (err) {
|
||||
console.log(err);
|
||||
return badRequestResponse("body is required");
|
||||
}
|
||||
|
||||
|
Reference in New Issue
Block a user