fix annoying 403 issue (#9)

src/hooks.server.ts

@@ -3,6 +3,7 @@ import { GoogleProvider } from '@rabrennie/sveltekit-auth/providers';
 import { JwtStrategy } from '@rabrennie/sveltekit-auth/session';
 import { env } from '$env/dynamic/private';
 import type { Handle, RequestEvent } from '@sveltejs/kit';
+import { redirect } from '@sveltejs/kit';
 import { sequence } from '@sveltejs/kit/hooks';
 import { db } from '$lib/server/database';
 
@@ -31,6 +32,16 @@ const saveUser = async (event: RequestEvent, profile: Profile) => {
             ...create
         }
     });
+
+    const redirectCookie = event.cookies.get('redirect');
+    if (redirectCookie) {
+        // prevent open redirect
+        const uri = new URL(redirectCookie, 'https://sprintna.me');
+        event.cookies.delete('redirect', { path: '/' });
+        if (uri.origin === 'https://sprintna.me') {
+            throw redirect(302, uri.pathname);
+        }
+    }
 };
 
 export const authHandlerConfig: AuthHandlerConfig = {

src/routes/room/[room]/+page.server.ts

@@ -2,7 +2,7 @@ import { db, rooms } from '$lib/server/database';
 import { zk } from 'zodkit';
 import type { Actions, PageServerLoad, RequestEvent } from './$types';
 import { z } from 'zod';
-import { error, fail } from '@sveltejs/kit';
+import { error, fail, redirect } from '@sveltejs/kit';
 import { roomsState } from './events/state.server';
 import type Room from '../../../types/Room';
 import { RoomState, type Choice as RoomChoice } from '../../../types/Room';
@@ -28,7 +28,8 @@ const mapChoice = (choice: Choice): RoomChoice => ({
 
 export const load = (async (event) => {
     if (!event.locals.user?.id) {
-        throw error(403, 'nope');
+        event.cookies.set('redirect', `/room/${getLinkId(event)}`, { path: '/', maxAge: 300 });
+        throw redirect(302, '/auth/redirect/google');
     }
 
     const dbRoom = await rooms.findOrError(getLinkId(event), event.locals.user.id, {