mbatchelder
8f55626e03
- Reorganize into apps/, packages/, docs/, e2e/, pocketbase/ directories - Add Dockerfiles for web, worker, and PocketBase services - Add docker-compose.yml for local orchestration - Add turbo.json for monorepo task management - Add Playwright e2e test infrastructure - Add PocketBase backend with migrations - Remove Vite/Next.js/ESLint/PostCSS config files - Update package.json with workspace dependencies - Add .env.example and .dockerignore
45 lines
1.3 KiB
TypeScript
45 lines
1.3 KiB
TypeScript
import { NextRequest, NextResponse } from 'next/server';
|
|
|
|
export function middleware(request: NextRequest) {
|
|
// Check if user is authenticated
|
|
const token = request.cookies.get('pb_auth')?.value;
|
|
|
|
// If no token and trying to access protected routes, redirect to login
|
|
if (!token && request.nextUrl.pathname.startsWith('/dashboard')) {
|
|
const loginUrl = new URL('/login', request.url);
|
|
return NextResponse.redirect(loginUrl);
|
|
}
|
|
|
|
// Create response
|
|
const response = NextResponse.next();
|
|
|
|
// Forward proxy headers for proper client IP detection
|
|
// Nginx Proxy Manager sets X-Forwarded-For and X-Forwarded-Proto
|
|
const forwardedFor = request.headers.get('x-forwarded-for');
|
|
const forwardedProto = request.headers.get('x-forwarded-proto');
|
|
|
|
if (forwardedFor) {
|
|
response.headers.set('x-real-ip', forwardedFor.split(',')[0].trim());
|
|
}
|
|
|
|
if (forwardedProto) {
|
|
response.headers.set('x-forwarded-proto', forwardedProto);
|
|
}
|
|
|
|
return response;
|
|
}
|
|
|
|
export const config = {
|
|
matcher: [
|
|
/*
|
|
* Match all request paths except:
|
|
* - api/auth routes (login, logout, etc.)
|
|
* - _next/static (static files)
|
|
* - _next/image (image optimization)
|
|
* - favicon.ico (favicon)
|
|
* - public files (public folder)
|
|
*/
|
|
'/((?!api/auth|_next/static|_next/image|favicon.ico|public).*)',
|
|
],
|
|
};
|