feat(#9): Add sign up

src/routes/+layout.server.ts

@@ -0,0 +1,10 @@
+import type { LayoutServerLoad } from './$types';
+
+export const load: LayoutServerLoad = async ({ locals: { safeGetSession } }) => {
+	const { session, user } = await safeGetSession();
+
+	return {
+		session,
+		user
+	};
+};

src/routes/+layout.svelte

@@ -0,0 +1,6 @@
+<script lang="ts">
+</script>
+
+<main>
+	<slot />
+</main>

src/routes/+layout.ts

@@ -0,0 +1,34 @@
+import { PUBLIC_SUPABASE_ANON_KEY, PUBLIC_SUPABASE_URL } from '$env/static/public';
+import type { LayoutLoad } from './$types';
+import { createBrowserClient, isBrowser, parse } from '@supabase/ssr';
+
+export const load: LayoutLoad = async ({ fetch, data, depends }) => {
+	depends('supabase:auth');
+
+	const supabase = createBrowserClient(PUBLIC_SUPABASE_URL, PUBLIC_SUPABASE_ANON_KEY, {
+		global: {
+			fetch
+		},
+		cookies: {
+			get(key) {
+				if (!isBrowser()) {
+					return JSON.stringify(data.session);
+				}
+
+				const cookie = parse(document.cookie);
+				return cookie[key];
+			}
+		}
+	});
+
+	/**
+	 * It's fine to use `getSession` here, because on the client, `getSession` is
+	 * safe, and on the server, it reads `session` from the `LayoutData`, which
+	 * safely checked the session using `safeGetSession`.
+	 */
+	const {
+		data: { session }
+	} = await supabase.auth.getSession();
+
+	return { supabase, session };
+};

src/routes/+page.svelte

@@ -1,2 +1,9 @@
-<h1>Welcome to SvelteKit</h1>
-<p>Visit <a href="https://kit.svelte.dev">kit.svelte.dev</a> to read the documentation</p>
+<script lang="ts">
+	import SignUp from '$lib/components/SignUp.svelte';
+
+	export let data;
+	let { supabase } = data;
+	$: ({ supabase } = data);
+</script>
+
+<SignUp {supabase} />

src/routes/auth/confirm/+server.ts

@@ -0,0 +1,22 @@
+import { redirect } from '@sveltejs/kit';
+import { type EmailOtpType } from '@supabase/supabase-js';
+
+export const GET = async (event) => {
+	const {
+		url,
+		locals: { supabase }
+	} = event;
+	const token_hash = url.searchParams.get('token_hash') as string;
+	const type = url.searchParams.get('type') as EmailOtpType | null;
+	const next = url.searchParams.get('next') ?? '/';
+
+	if (token_hash && type) {
+		const { error } = await supabase.auth.verifyOtp({ token_hash, type });
+		if (!error) {
+			throw redirect(303, `/${next.slice(1)}`);
+		}
+	}
+
+	// return the user to an error page with some instructions
+	throw redirect(303, '/auth/auth-code-error');
+};