atridad/pollo
1
0
Fork 0
Code Activity Actions

Changed middleware

Browse source
This commit is contained in:
Atridad Lahiji 2023-10-05 00:58:00 -06:00
parent ad05930086
commit 96f7bcb7e2
No known key found for this signature in database
1 changed files with 19 additions and 60 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

79
middleware.ts
View file

@ -15,74 +15,33 @@ const rateLimit = new Ratelimit({
});
export default authMiddleware({
ignoredRoutes: ["/"],
publicRoutes: [
"/",
"/api/external/public/(.*)",
"/api/webhooks",
"/api/webhooks/(.*)",
],
afterAuth: async (auth, req) => {
if (!auth.userId && auth.isPublicRoute) {
const { success } = await rateLimit.limit(req.ip || "");
if (success) {
return NextResponse.next();
apiRoutes: ["/api/external/private/(.*)", "/api/internal/(.*)"],
beforeAuth: async (req) => {
const { success } = await rateLimit.limit(req.ip || "");
if (success) {
if (req.nextUrl.pathname.includes("/api/external/private")) {
const isValid = await validateRequest(req);
if (!isValid) {
return new NextResponse("UNAUTHORIZED", {
status: 403,
statusText: "Unauthorized!",
});
}
}
return new NextResponse("TOO MANY REQUESTS", {
status: 429,
statusText: "Too many requests!",
});
return NextResponse.next();
}
if (req.nextUrl.pathname.includes("/api/internal")) {
const { success } = await rateLimit.limit(req.ip || "");
if (!success) {
return new NextResponse("TOO MANY REQUESTS", {
status: 429,
statusText: "Too many requests!",
});
}
if (auth.userId) {
return NextResponse.next();
} else {
return new NextResponse("UNAUTHORIZED", {
status: 403,
statusText: "Unauthorized!",
});
}
}
if (req.nextUrl.pathname.includes("/api/external/private")) {
const { success } = await rateLimit.limit(req.ip || "");
if (!success) {
return new NextResponse("TOO MANY REQUESTS", {
status: 429,
statusText: "Too many requests!",
});
}
const isValid = await validateRequest(req);
if (isValid) {
return NextResponse.next();
} else {
return new NextResponse("UNAUTHORIZED", {
status: 403,
statusText: "Unauthorized!",
});
}
}
if (!auth.userId && !auth.isPublicRoute) {
if (req.nextUrl.pathname.includes("/api")) {
return NextResponse.next();
}
// This is annoying...
// eslint-disable-next-line @typescript-eslint/no-unsafe-return, @typescript-eslint/no-explicit-any
return redirectToSignIn({ returnBackUrl: req.url });
}
return new NextResponse("TOO MANY REQUESTS", {
status: 429,
statusText: "Too many requests!",
});
},
});