diff --git a/apps/api/src/env.ts b/apps/api/src/env.ts
index 40283c1..37dc2e9 100644
--- a/apps/api/src/env.ts
+++ b/apps/api/src/env.ts
@@ -18,5 +18,5 @@ export const env = {
WEBFLOW_AUTH: requireEnv("WEBFLOW_AUTH"),
WEBFLOW_WEBHOOK_SECRET: requireEnv("WEBFLOW_WEBHOOK_SECRET"),
NODE_ENV: optionEnv("NODE_ENV", "development"),
- LOG_LEVEL: optionEnv("LOG_LEVEL", "info")
+ LOG_LEVEL: optionEnv("LOG_LEVEL", "info"),
};
diff --git a/apps/api/src/server.ts b/apps/api/src/server.ts
index 02fa080..d5add7b 100644
--- a/apps/api/src/server.ts
+++ b/apps/api/src/server.ts
@@ -9,7 +9,7 @@ import {
PlayerSchema,
} from "@blade-and-brawn/domain"
import { cors } from "@elysiajs/cors";
-import { Elysia, NotFoundError, status } from "elysia";
+import { Elysia, NotFoundError, status, t } from "elysia";
import {
PrintfulClient,
PrintfulError,
@@ -133,6 +133,9 @@ export const app = new Elysia()
// TODO: protect with api key/token
.group("/products", (app) =>
app
+ .onBeforeHandle(({ }) => {
+ // authenticate cookie
+ })
.group("/sync", (app) =>
app
// Sync status
@@ -163,7 +166,7 @@ export const app = new Elysia()
return { printfulProduct, webflowProduct };
}, {
params: z.object({ printfulProductId: z.coerce.number() })
- }),
+ })
)
// WEBHOOKS
diff --git a/apps/portal/package.json b/apps/portal/package.json
index b9552bf..b496a81 100644
--- a/apps/portal/package.json
+++ b/apps/portal/package.json
@@ -25,8 +25,8 @@
"@blade-and-brawn/commerce": "workspace:*",
"@blade-and-brawn/domain": "workspace:*",
"@elysia/eden": "^1.4.10",
- "@tailwindcss/vite": "^4.3.1",
- "daisyui": "^5.5.23",
- "tailwindcss": "^4.3.1"
+ "@tailwindcss/vite": "^4.3.2",
+ "daisyui": "^5.6.6",
+ "tailwindcss": "^4.3.2"
}
}
diff --git a/apps/portal/src/hooks.server.ts b/apps/portal/src/hooks.server.ts
new file mode 100644
index 0000000..fe40560
--- /dev/null
+++ b/apps/portal/src/hooks.server.ts
@@ -0,0 +1,15 @@
+import { env } from '$env/dynamic/private';
+import { redirect, type Handle } from '@sveltejs/kit';
+import { createHmac } from 'node:crypto';
+
+export const handle: Handle = async ({ event, resolve }) => {
+ const cookieHash = event.cookies.get("session");
+ const computedHash = createHmac("sha256", env.PORTAL_SECRET)
+ .update("authenticated")
+ .digest("hex");
+ if (event.url.pathname !== "/login" && cookieHash !== computedHash)
+ redirect(307, "/login");
+
+ const response = await resolve(event);
+ return response;
+};
diff --git a/apps/portal/src/routes/+layout.svelte b/apps/portal/src/routes/(app)/+layout.svelte
similarity index 98%
rename from apps/portal/src/routes/+layout.svelte
rename to apps/portal/src/routes/(app)/+layout.svelte
index d97e99f..20a1f9a 100644
--- a/apps/portal/src/routes/+layout.svelte
+++ b/apps/portal/src/routes/(app)/+layout.svelte
@@ -1,7 +1,7 @@
+
+
+
+
+ {#if form?.error}
+
+ {form.error}
+
+ {/if}
+
+
+
+
+