improve login

README.md

···
 
 Attic is a cozy space with lofty ambitions.
 
+What does Attic do? I'm still deciding... it'll probably become a random assortment of features. Right now it has bookmarks. Bookmarks will have search and tags soon.
+
+Attic is extremely early in development! Use a your own risk :)
+
 * * *
 
 Copyright © 2026 [David Bushell](https://dbushell.com)

src/lib/server/session.ts

···
   handle: string,
 ): Promise<URL> => {
   if (isHandle(handle) === false) {
-    throw new Error("invalid handle");
+    throw new Error("Invalid handle.");
+  }
+  try {
+    const oAuthClient = createOAuthClient(event);
+    const { url } = await oAuthClient.authorize({
+      target: { "type": "account", identifier: handle },
+    });
+    // Temporary to remember handle across oauth flow
+    event.cookies.set(
+      HANDLE_COOKIE,
+      handle,
+      {
+        httpOnly: true,
+        maxAge: OAUTH_MAX_AGE,
+        path: "/",
+        sameSite: "lax",
+        secure: !dev,
+      },
+    );
+    return url;
+  } catch (err) {
+    console.log(err);
+    throw new Error("OAuth failed.");
   }
-  const oAuthClient = createOAuthClient(event);
-  const { url } = await oAuthClient.authorize({
-    target: { "type": "account", identifier: handle },
-  });
-  // Temporary to remember handle across oauth flow
-  event.cookies.set(
-    HANDLE_COOKIE,
-    handle,
-    {
-      httpOnly: true,
-      maxAge: OAUTH_MAX_AGE,
-      path: "/",
-      sameSite: "lax",
-      secure: !dev,
-    },
-  );
-  return url;
 };
 
 /**

src/routes/+layout.svelte

···
 <script lang="ts">
+  import { dev } from "$app/environment";
   import "$css/main.css";
   import { pointer } from "$lib/dialog.svelte.js";
   import { onMount } from "svelte";
 
   onMount(() => {
+    if (dev === false) {
+      globalThis.addEventListener("load", () => {
+        navigator.serviceWorker.register("/service-worker.js");
+      });
+    }
     if (pointer.ref) {
       pointer.ref.showPopover();
     }

src/routes/+page.server.ts

···
       throw new Error();
     }
     const formData = await event.request.formData();
-    const handle = formData.get("handle");
+    let handle = String(formData.get("handle"));
+    if (handle.startsWith("@")) {
+      handle = handle.substring(1);
+    }
     let url: URL;
     try {
       event.cookies.delete(HANDLE_COOKIE, { path: "/" });
-      url = await startSession(event, String(handle ?? ""));
+      url = await startSession(event, handle);
     } catch (err) {
-      console.log(err);
-      return fail(400, { handle, action: "login", error: "Invalid handle." });
+      let message = "Login failed.";
+      if (err instanceof Error && err.message) {
+        message = err.message;
+      }
+      return fail(400, { handle, action: "login", error: message });
     }
     redirect(303, url);
   },

svelte.config.js

···
       publicPrefix: "PUBLIC",
       privatePrefix: "PRIVATE",
     },
+    serviceWorker: {
+      register: false,
+    },
   },
 };