103 lines
2.8 KiB
TypeScript
103 lines
2.8 KiB
TypeScript
import { authMiddleware, redirectToSignIn } from "@clerk/nextjs";
|
|
import { validateRequest } from "./app/_lib/unkey";
|
|
import { NextResponse } from "next/server";
|
|
import { Ratelimit } from "@upstash/ratelimit";
|
|
import { Redis } from "@upstash/redis";
|
|
import { env } from "./env.mjs";
|
|
|
|
const rateLimit = new Ratelimit({
|
|
redis: Redis.fromEnv(),
|
|
limiter: Ratelimit.slidingWindow(
|
|
Number(env.UPSTASH_RATELIMIT_REQUESTS),
|
|
`${Number(env.UPSTASH_RATELIMIT_SECONDS)}s`
|
|
),
|
|
analytics: true,
|
|
});
|
|
|
|
export default authMiddleware({
|
|
ignoredRoutes: ["/"],
|
|
publicRoutes: [
|
|
"/api/external/public/(.*)",
|
|
"/api/webhooks",
|
|
"/api/webhooks/(.*)",
|
|
],
|
|
afterAuth: async (auth, req) => {
|
|
if (!auth.userId && auth.isPublicRoute) {
|
|
const { success } = await rateLimit.limit(req.ip || "");
|
|
if (success) {
|
|
return NextResponse.next();
|
|
}
|
|
return new NextResponse("TOO MANY REQUESTS", {
|
|
status: 429,
|
|
statusText: "Too many requests!",
|
|
});
|
|
} else {
|
|
const isAMA = auth.user?.emailAddresses.map((email) =>
|
|
email.emailAddress.includes("ama.ab.ca")
|
|
);
|
|
|
|
console.log("ISAMA: ", isAMA);
|
|
|
|
if (isAMA && isAMA?.length > 0) {
|
|
return NextResponse.redirect(
|
|
"https://www.youtube.com/watch?v=dQw4w9WgXcQ"
|
|
);
|
|
}
|
|
}
|
|
|
|
if (req.nextUrl.pathname.includes("/api/internal")) {
|
|
const { success } = await rateLimit.limit(req.ip || "");
|
|
|
|
if (!success) {
|
|
return new NextResponse("TOO MANY REQUESTS", {
|
|
status: 429,
|
|
statusText: "Too many requests!",
|
|
});
|
|
}
|
|
|
|
if (auth.userId) {
|
|
return NextResponse.next();
|
|
} else {
|
|
return new NextResponse("UNAUTHORIZED", {
|
|
status: 403,
|
|
statusText: "Unauthorized!",
|
|
});
|
|
}
|
|
}
|
|
|
|
if (req.nextUrl.pathname.includes("/api/external/private")) {
|
|
const { success } = await rateLimit.limit(req.ip || "");
|
|
|
|
if (!success) {
|
|
return new NextResponse("TOO MANY REQUESTS", {
|
|
status: 429,
|
|
statusText: "Too many requests!",
|
|
});
|
|
}
|
|
|
|
const isValid = await validateRequest(req);
|
|
|
|
if (isValid) {
|
|
return NextResponse.next();
|
|
} else {
|
|
return new NextResponse("UNAUTHORIZED", {
|
|
status: 403,
|
|
statusText: "Unauthorized!",
|
|
});
|
|
}
|
|
}
|
|
|
|
if (!auth.userId && !auth.isPublicRoute) {
|
|
if (req.nextUrl.pathname.includes("/api")) {
|
|
return NextResponse.next();
|
|
}
|
|
// This is annoying...
|
|
// eslint-disable-next-line @typescript-eslint/no-unsafe-return, @typescript-eslint/no-explicit-any
|
|
return redirectToSignIn({ returnBackUrl: req.url });
|
|
}
|
|
},
|
|
});
|
|
|
|
export const config = {
|
|
matcher: ["/((?!.*\\..*|_next).*)", "/", "/(api)(.*)"],
|
|
};
|