confirmation

src/components/Header.svelte

@@ -16,8 +16,7 @@
 		currentUser = await supabase.auth.getUser();
 	}
 
-	supabase.auth.onAuthStateChange((event) => {
-		console.log(event);
+	supabase.auth.onAuthStateChange(() => {
 		getCurrentUser();
 	});
 </script>

src/routes/auth/+page.svelte

@@ -56,7 +56,6 @@
 
 	$effect(() => {
 		[$signupMessages, $signInMessages, $resetPasswordMessages].forEach((message) => {
-			console.log(message);
 			if (message) {
 				toast.success(message);
 			}

src/routes/auth/+page.ts

@@ -8,9 +8,5 @@ export const load: PageLoad = async ({ url }) => {
 		redirect(303, '/auth/recovery');
 	}
 
-	if (url.searchParams.get('type') === 'signup') {
-		redirect(303, '/protected-routes/dashboard');
-	}
-
 	return {};
 };

src/routes/auth/confirm/+server.ts

@@ -0,0 +1,32 @@
+// src/routes/auth/confirm/+server.ts
+import type { EmailOtpType } from '@supabase/supabase-js';
+import { redirect } from '@sveltejs/kit';
+
+import type { RequestHandler } from './$types';
+
+export const GET: RequestHandler = async ({ url, locals: { supabase } }) => {
+	const token_hash = url.searchParams.get('token_hash');
+	const type = url.searchParams.get('type') as EmailOtpType | null;
+	const next = url.searchParams.get('next') ?? '/account';
+
+	/**
+	 * Clean up the redirect URL by deleting the Auth flow parameters.
+	 *
+	 * `next` is preserved for now, because it's needed in the error case.
+	 */
+	const redirectTo = new URL(url);
+	redirectTo.pathname = next;
+	redirectTo.searchParams.delete('token_hash');
+	redirectTo.searchParams.delete('type');
+
+	if (token_hash && type) {
+		const { error } = await supabase.auth.verifyOtp({ type, token_hash });
+		if (!error) {
+			redirectTo.searchParams.delete('next');
+			redirect(303, redirectTo);
+		}
+	}
+
+	redirectTo.pathname = '/auth/error';
+	redirect(303, redirectTo);
+};

src/routes/auth/error/+page.svelte

@@ -0,0 +1 @@
+<p>Login error</p>