authentication in ssr (queryLoad)

How do i authenticate requests on the server side in sveltekit´s load function?

Using the setHeaders method overrides the global headers so parallel requests may be incorrectly authenticated.

// src/routes/__layout.svelte
export const load: Load = async ({ session, fetch }) => {

	kitQLClient.setHeaders(
		session.token ? { Authorization: `Bearer ${session.token}` : {}
	);

	await sleep(3000);

	console.log(kitQLClient.getHeaders());

	return {};
};

When two clients connect within 3 seconds and only one is logged in, the second requests authentication state is used for the first request aswell.

[jycouet]

Yes, you are right @david-plugge.

Will handle this in the next “big” version.

[jycouet]

I’m in a big refactoring for even a better accelerator 😉 And for sure, I will add a dedicated page in the doc on this topic showing different options available.