-
Notifications
You must be signed in to change notification settings - Fork 0
/
middleware.ts
82 lines (72 loc) · 2.43 KB
/
middleware.ts
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
import type { NextRequest } from "next/server";
import { NextResponse } from "next/server";
import { authentication } from "next-firebase-auth-edge/lib/next/middleware";
import { authConfig } from "./config/server-config";
const PUBLIC_PATHS = ["/register", "/login", "/reset-password"];
function redirectToHome(request: NextRequest) {
const url = request.nextUrl.clone();
url.pathname = "/";
url.search = "";
return NextResponse.redirect(url);
}
function redirectToLogin(request: NextRequest) {
if (PUBLIC_PATHS.includes(request.nextUrl.pathname)) {
return NextResponse.next();
}
const url = request.nextUrl.clone();
url.pathname = "/login";
url.search = `redirect=${request.nextUrl.pathname}${url.search}`;
return NextResponse.redirect(url);
}
function redirectToVerify(request: NextRequest) {
if (request.nextUrl.pathname === "/add-mobile") {
return NextResponse.next();
}
const url = request.nextUrl.clone();
url.pathname = "/add-mobile";
url.search = `redirect=${request.nextUrl.pathname}${url.search}`;
return NextResponse.redirect(url);
}
export async function middleware(request: NextRequest) {
return authentication(request, {
loginPath: "/api/login",
logoutPath: "/api/logout",
apiKey: authConfig.apiKey,
cookieName: authConfig.cookieName,
cookieSerializeOptions: authConfig.cookieSerializeOptions,
cookieSignatureKeys: authConfig.cookieSignatureKeys,
serviceAccount: authConfig.serviceAccount,
handleValidToken: async ({ token, decodedToken }, headers) => {
// Authenticated user should not be able to access /login, /register and /reset-password routes
if (PUBLIC_PATHS.includes(request.nextUrl.pathname)) {
return redirectToHome(request);
}
const userVerified = request.cookies.get("userVerified");
if (request.nextUrl.pathname.includes("/new")) {
if (!userVerified) {
return redirectToVerify(request);
}
}
return NextResponse.next({
request: {
headers,
},
});
},
handleInvalidToken: async () => {
return redirectToLogin(request);
},
handleError: async (error) => {
console.error("Unhandled authentication error", { error });
return redirectToLogin(request);
},
});
}
export const config = {
matcher: [
"/",
"/((?!_next|favicon.ico|api|.*\\.|missing|about|resources|blood-appeal).*)",
"/api/login",
"/api/logout",
],
};