svrjs/svrjs-nextjs-website
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Secure API endpoints #10

Closed
DorianNiemiecSVRJS wants to merge 1 commit from main into main
pull from: main
merge into: svrjs:main
Conversation 2 Commits 1 Files changed 1 +20 -4
1 changed files with 20 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit 44e4ed1161 - Show all commits

24
middleware.ts
View file

@ -5,10 +5,22 @@ import { getToken } from "next-auth/jwt";
export async function middleware(req: NextRequest) {
const token = await getToken({ req, secret: process.env.NEXTAUTH_SECRET });
if (req.nextUrl.pathname.startsWith("/admin") && !token) {
const url = req.nextUrl.clone();
url.pathname = "/login";
return NextResponse.redirect(url);
if (!token) {
if (req.nextUrl.pathname.startsWith("/admin")) {
const url = req.nextUrl.clone();
url.pathname = "/login";
return NextResponse.redirect(url);
} else if (req.nextUrl.pathname.startsWith("/api/mdx/pages") && req.method != "GET") {
return NextResponse.json(
{ error: "Login required" },
{ status: 401 }
);
} else if (req.nextUrl.pathname.startsWith("/api")) {
return NextResponse.json(
{ error: "Login required" },
{ status: 401 }
);
}
}
return NextResponse.next();
@ -20,9 +32,13 @@ export const config = {
"/api/delete/downloads/[id]",
"/api/delete/logs/[id]",
"/api/delete/mods/[id]",
"/api/delete/vulnerability/[id]",
"/api/mdx/pages",
"/api/mdx/pages/[slug]",
"/api/upload",
"/api/uploadlogs",
"/api/uploadmods",
"/api/uploadthing",
"/api/uploadvulnerabilities",
],
};