mbatchelder
b3ff23a5f0
- Rewrote Drizzle schema: 20 tables with enums, relations, indexes - Generated migration with DROP TABLE records (v1 EAV removal) - Added passkey auth routes (register/login) - Added requireWorkspaceAccess helper - Added seedDefaultData for Personal workspace + welcome note - Updated SSE endpoint for v2 entities + workspace_id filtering - Created recordActivity helper (insert + pg_notify) - Updated sidebar: Graph replaces Reports, removed Analytics - Updated command palette for v2 entities - Created AGENTS.md with locked contract - Created llm-wiki scaffold (5 stubs) - Added inline AGENT INSTRUCTION comments to all 50 API route files - Fixed globals.css border-border class conflict - Updated database.ts stub for v1 compatibility
51 lines
1.6 KiB
TypeScript
51 lines
1.6 KiB
TypeScript
import { NextRequest, NextResponse } from 'next/server';
|
|
|
|
export function middleware(request: NextRequest) {
|
|
// Check if user is authenticated
|
|
const token = request.cookies.get('next-auth.session-token')?.value
|
|
|| request.cookies.get('__Secure-next-auth.session-token')?.value;
|
|
|
|
// Protected routes (v1 + v2)
|
|
const protectedRoutes = [
|
|
'/dashboard', '/tasks', '/habits', '/projects', '/notes', '/reports',
|
|
'/calendar', '/analytics', '/agents', '/settings',
|
|
'/graph', '/domains',
|
|
];
|
|
if (!token && protectedRoutes.some((route) => request.nextUrl.pathname === route || request.nextUrl.pathname.startsWith(`${route}/`))) {
|
|
const loginUrl = new URL('/login', request.url);
|
|
return NextResponse.redirect(loginUrl);
|
|
}
|
|
|
|
// Create response
|
|
const response = NextResponse.next();
|
|
|
|
// Forward proxy headers for proper client IP detection
|
|
// Nginx Proxy Manager sets X-Forwarded-For and X-Forwarded-Proto
|
|
const forwardedFor = request.headers.get('x-forwarded-for');
|
|
const forwardedProto = request.headers.get('x-forwarded-proto');
|
|
|
|
if (forwardedFor) {
|
|
response.headers.set('x-real-ip', forwardedFor.split(',')[0].trim());
|
|
}
|
|
|
|
if (forwardedProto) {
|
|
response.headers.set('x-forwarded-proto', forwardedProto);
|
|
}
|
|
|
|
return response;
|
|
}
|
|
|
|
export const config = {
|
|
matcher: [
|
|
/*
|
|
* Match all request paths except:
|
|
* - api/auth routes (login, logout, etc.)
|
|
* - _next/static (static files)
|
|
* - _next/image (image optimization)
|
|
* - favicon.ico (favicon)
|
|
* - public files (public folder)
|
|
*/
|
|
'/((?!api/auth|_next/static|_next/image|favicon.ico|public).*)',
|
|
],
|
|
};
|