35 lines
914 B
TypeScript
35 lines
914 B
TypeScript
|
import { auth } from "@/lib/auth";
|
||
|
|
import { NextResponse } from "next/server";
|
||
|
|
|
||
|
|
export default auth((req) => {
|
||
|
|
const { pathname } = req.nextUrl;
|
||
|
|
|
||
|
|
const isPublic =
|
||
|
|
pathname === "/" ||
|
||
|
|
pathname.startsWith("/sign-in") ||
|
||
|
|
pathname.startsWith("/sign-up") ||
|
||
|
|
pathname.startsWith("/api/auth");
|
||
|
|
|
||
|
|
if (isPublic) {
|
||
|
|
return NextResponse.next();
|
||
|
|
}
|
||
|
|
|
||
|
|
if (!req.auth) {
|
||
|
|
const signInUrl = new URL("/sign-in", req.url);
|
||
|
|
signInUrl.searchParams.set("callbackUrl", pathname);
|
||
|
|
return NextResponse.redirect(signInUrl);
|
||
|
|
}
|
||
|
|
|
||
|
|
return NextResponse.next();
|
||
|
|
});
|
||
|
|
|
||
|
|
export const config = {
|
||
|
|
matcher: [
|
||
|
|
/*
|
||
|
|
* Skip API (tRPC etc. handle their own auth), Next internals, and static files.
|
||
|
|
* Page routes under the (app) group are protected; (auth) and "/" stay public via logic above.
|
||
|
|
*/
|
||
|
|
"/((?!api|_next/static|_next/image|favicon.ico|.*\\.(?:svg|png|jpg|jpeg|gif|webp)$).*)",
|
||
|
|
],
|
||
|
|
};
|