SvelteKit auth with seperate Backend

export const handle = async ({ event, resolve }) => {
	const res = await event.fetch(`http://127.0.0.1:3000/user`);
	if (res.ok) {
		const data = await res.json();
		event.locals.user = data;
	}

	const response = await resolve(event);
	return response;
};

export const handleFetch = async ({ event, request, fetch }) => {
	if (request.url.startsWith('http://127.0.0.1:3000/')) {
		const cookies = event.request.headers.get('cookie');
		if (cookies) {
			request.headers.set('cookie', cookies);
		}
	}
	return fetch(request);
};

declare global {
	namespace App {
		interface Locals {
			user?: {
				name: string;
			};
		}
	}
}

export {};

export const load = async ({ locals }) => {
	return {
		user: locals.user
	};
};

<script>
	import { enhance } from '$app/forms';
	import { page } from '$app/stores';
</script>

<p>Hello {$page.data.user.name}</p>

<form method="POST" action="?/login" use:enhance>
	<button>Login</button>
</form>

export const actions = {
	login: async ({ fetch, cookies }) => {
		const res = await fetch(`http://127.0.0.1:3000/login`, { method: 'POST' });
		const data = await res.json();
		// data = { token: 123} or read cookie (see next section)
		cookies.set('token', data.token, {
			path: '/',
			sameSite: 'none',
			secure: true
		});
	}
};

export const actions = {
	default: async ({ fetch }) => {
		const res = await fetch(`http://127.0.0.1:3000/login`, { method: 'POST' });
		const responseCookies = res.headers.get('set-cookie');
		if (responseCookies) {
			const parsedCookies = parseCookie(responseCookies);
			// set cookie
		}
	}
};

const parseCookie = (str: string): { [key: string]: string } =>
	str
		.split(';')
		.map((v) => v.split('='))
		.reduce<{ [key: string]: string }>((acc, v) => {
			acc[decodeURIComponent(v[0].trim())] = decodeURIComponent(v[1].trim());
			return acc;
		}, {});