Svelte · Senior · Question 23 of 75

Why is an auth check only in `+layout.server.js` risky?

✓Correct answer: Layout load doesn't necessarily re-run on every navigation, and pages can load data in parallel without waiting for it; protect data in hooks or each page's load
2Layouts can't read cookies
3Layouts run only in the browser

Explanation

SvelteKit docs warn about this: a layout guard doesn't protect child data loads by itself.

Further reading

Test yourself

Take the Svelte · Senior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.