39 lines
1.1 KiB
TypeScript
39 lines
1.1 KiB
TypeScript
import { NextResponse } from 'next/server'
|
|
import type { NextRequest } from 'next/server'
|
|
import { updateSession, decrypt } from './lib/auth'
|
|
|
|
export async function proxy(request: NextRequest) {
|
|
// Always update session expiration
|
|
let response = await updateSession(request)
|
|
|
|
const isAuthPage = request.nextUrl.pathname.startsWith('/admin/login')
|
|
const isAdminPage = request.nextUrl.pathname.startsWith('/admin')
|
|
|
|
// Check if session exists and is valid
|
|
const sessionValue = request.cookies.get('session')?.value
|
|
let session = null
|
|
if (sessionValue) {
|
|
try {
|
|
session = await decrypt(sessionValue)
|
|
} catch(e) {
|
|
session = null
|
|
}
|
|
}
|
|
|
|
// If trying to access admin pages (except login) without a valid session
|
|
if (isAdminPage && !isAuthPage && !session) {
|
|
return NextResponse.redirect(new URL('/admin/login', request.url))
|
|
}
|
|
|
|
// If trying to access login page with a valid session
|
|
if (isAuthPage && session) {
|
|
return NextResponse.redirect(new URL('/admin', request.url))
|
|
}
|
|
|
|
return response || NextResponse.next()
|
|
}
|
|
|
|
export const config = {
|
|
matcher: ['/admin/:path*'],
|
|
}
|