redirect from endpoint on client (possible session issue)

[wysher]

Hi,
for three days I struggle with doing some authentication on my app, which will work with JS enabled and disabled.

on __layout.svelte I check if user is authenticated if so I'll show "logout" button, otherwise redirect to "auth/login" page.

After login I want to redirect to "/". I use native form with action="/auth/login" and method="post".

First on endpoint I set status=302, headers.location="/" and it works, refetching whole page after login/logout.
Second I use:enhance on form like in example app, and... it wont work anymore. After login/logout nothing really happens.

It looks like session is not refreshed correctly on client (i.e handle hook do not run). Or maybe this is an issue with new invalidate method.

I find that some people just set window.location, but this not satisfy my needs.
Like in this article: https://blog.logrocket.com/authentication-sveltekit-using-cookies/ Author points that goto won't work here.
Under discussion section is a purpose to set session store after successful login, like in here:
JannikWempe/svelte-auth@7732fa8

But again, this will work only on client side, because it requires to return session in body instead of redirecting.
And because we cannot redirect AND send body at the same time it won't work without JS.

I tested several approaches, none of them work.
Here's repo I made to show this: https://github.com/wysher/sveltekit-auth-issue

[wysher]

I found a solution exploring svelte real-world example.
Just use accept header. If it's 'application/json' is client ajax request, like so

https://github.com/wysher/sveltekit-auth-issue/pull/1/files

[wysher]

I still think that something may be wrong with session (invalidate). Why session store must be set on client despite it was updated on server side?

EDIT:
this might help: #1684

Other related issues I found:
#2301
#2252