import { NextResponse } from 'next/server';
import type { NextRequest } from 'next/server';
import { getToken } from 'next-auth/jwt';
export async function middleware(request: NextRequest) {
const token = await getToken({ req: request, secret: process.env.NEXT_AUTH_SECRET });
const { pathname } = request.nextUrl;
// If the user is logged in and they try to access /signin , /, redirect them away.
const unAuthorizedRouteOnly = ["/signin", "/"]
if (token && unAuthorizedRouteOnly.includes(pathname)) {
return NextResponse.redirect(new URL('/dashboard', request.url));
}
// If no token is found and they are not already on /signin or /, redirect to /signin.
if (!token && !unAuthorizedRouteOnly.includes(pathname)) {
const signInUrl = new URL('/signin', request.url);
signInUrl.searchParams.set('callbackUrl', request.url);
return NextResponse.redirect(signInUrl);
}
// Allow the request to proceed if none of the above conditions are met.
return NextResponse.next();
}
export const config = {
matcher: ['/((?!api|_next/static|_next/image|favicon.ico).*)'],
};
For further actions, you may consider blocking this person and/or reporting abuse
Top comments (0)