export async function loginWithGooglePopup() {
 const credential = await signInWithPopup(auth, authProvider);
 const idToken = await credential.user.getIdToken();
 if (idToken) {
 // call my own SvelteKit api route
 await fetch('/api/login', { method: 'POST', body: JSON.stringify({ idToken }) });
 await invalidateAll();
 }
}

export const POST: RequestHandler = async ({ request, cookies }) => {
 const { idToken } = await request.json();
 const expiresIn = 60 * 60 * 24 * 5 * 1000; // 5 days
 try {
 const decodedToken = await adminAuth.verifyIdToken(idToken);
 const cookie = await adminAuth.createSessionCookie(idToken, { expiresIn });
 const options = {
 maxAge: expiresIn,
 httpOnly: true,
 secure: PUBLIC_ENVIRONMENT === 'production' ? true : false,
 path: '/'
 };
 // use decodedToken to insert user data into database and do other stuff
 cookies.set('__session', cookie, options);
 return json({ status: 200 });
 } catch (err) {
 error(401,);
 }
};

import { adminAuth } from '$lib/server/firebase-admin/config';
export const handle: Handle = async ({ event, resolve }) => {
 const sessionCookie = event.cookies.get('__session');
 if (!sessionCookie) return await resolve(event);
 
 try {
 const userCookie = await adminAuth.verifySessionCookie(sessionCookie);
 event.locals.user = { ...userCookie }
 } catch (e) {
 console.log(e)
 }
 return await resolve(event);
};