Initial migration to new session based auth system with AllAuth

frontend/src/routes/activities/+page.server.ts

@@ -1,5 +1,6 @@
 import { redirect, type Actions } from '@sveltejs/kit';
 import type { PageServerLoad } from './$types';
+import { fetchCSRFToken } from '$lib/index.server';
 const PUBLIC_SERVER_URL = process.env['PUBLIC_SERVER_URL'];
 const endpoint = PUBLIC_SERVER_URL || 'http://localhost:8000';
 
@@ -7,13 +8,16 @@ export const load = (async (event) => {
 	if (!event.locals.user) {
 		return redirect(302, '/login');
 	}
+	let csrfToken = await fetchCSRFToken();
 	let allActivities: string[] = [];
-	let res = await fetch(`${endpoint}/api/activity-types/types/`, {
+	let res = await event.fetch(`${endpoint}/api/activity-types/types/`, {
 		headers: {
-			'Content-Type': 'application/json',
-			Cookie: `${event.cookies.get('auth')}`
-		}
+			'X-CSRFToken': csrfToken,
+			Cookie: `csrftoken=${csrfToken}`
+		},
+		credentials: 'include'
 	});
+	console.log(res);
 	let data = await res.json();
 	if (data) {
 		allActivities = data;
@@ -27,13 +31,16 @@ export const load = (async (event) => {
 
 export const actions: Actions = {
 	getActivities: async (event) => {
+		let csrfToken = await fetchCSRFToken();
 		let allActivities: string[] = [];
 		let res = await fetch(`${endpoint}/api/activity-types/types/`, {
 			headers: {
+				'X-CSRFToken': csrfToken,
 				'Content-Type': 'application/json',
-				Cookie: `${event.cookies.get('auth')}`
+				Cookie: `csrftoken=${csrfToken}`
 			}
 		});
+		console.log(res);
 		let data = await res.json();
 		if (data) {
 			allActivities = data;

frontend/src/routes/activities/+server.ts

@@ -1,15 +1,19 @@
 import { json } from '@sveltejs/kit';
-import type { RequestHandler } from '../data/$types';
+import type { RequestHandler } from '@sveltejs/kit';
+import { fetchCSRFToken } from '$lib/index.server';
 const PUBLIC_SERVER_URL = process.env['PUBLIC_SERVER_URL'];
 const endpoint = PUBLIC_SERVER_URL || 'http://localhost:8000';
 
 export const POST: RequestHandler = async (event) => {
 	let allActivities: string[] = [];
-	let res = await fetch(`${endpoint}/api/activity-types/types/`, {
+	let csrfToken = await fetchCSRFToken();
+	let sessionId = event.cookies.get('sessionid');
+	let res = await event.fetch(`${endpoint}/api/activity-types/types/`, {
 		headers: {
-			'Content-Type': 'application/json',
-			Cookie: `${event.cookies.get('auth')}`
-		}
+			'X-CSRFToken': csrfToken,
+			Cookie: `csrftoken=${csrfToken}; sessionid=${sessionId}`
+		},
+		credentials: 'include'
 	});
 	let data = await res.json();
 	if (data) {