aboutsummaryrefslogtreecommitdiff
path: root/apps/web/middleware.ts
blob: 8658c0d88464f3f3868360962d09f5b9dbf8309e (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
import { $fetch } from "@lib/api";
import { getSessionCookie } from "better-auth/cookies";
import { NextResponse } from "next/server";

export default async function middleware(request: Request) {
	console.debug("[MIDDLEWARE] === MIDDLEWARE START ===");
	const url = new URL(request.url);
	console.debug("[MIDDLEWARE] Path:", url.pathname);
	console.debug("[MIDDLEWARE] Method:", request.method);

	const sessionCookie = getSessionCookie(request);
	console.debug("[MIDDLEWARE] Session cookie exists:", !!sessionCookie);

	// Always allow access to login and waitlist pages
	const publicPaths = ["/login"];
	if (publicPaths.includes(url.pathname)) {
		console.debug("[MIDDLEWARE] Public path, allowing access");
		return NextResponse.next();
	}

	// If no session cookie and not on a public path, redirect to login
	if (!sessionCookie) {
		console.debug(
			"[MIDDLEWARE] No session cookie and not on public path, redirecting to /login",
		);
		return NextResponse.redirect(new URL("/login", request.url));
	}

	if (url.pathname !== "/waitlist") {
		const response = await $fetch("@get/waitlist/status", {
			headers: {
				Authorization: `Bearer ${sessionCookie}`,
			},
		});
		console.debug("[MIDDLEWARE] Waitlist status:", response.data);
		if (response.data && !response.data.accessGranted) {
			return NextResponse.redirect(new URL("/waitlist", request.url));
		}
	}

	console.debug("[MIDDLEWARE] Passing through to next handler");
	console.debug("[MIDDLEWARE] === MIDDLEWARE END ===");
	return NextResponse.next();
}

export const config = {
	matcher: [
		"/((?!_next/static|_next/image|images|icon.png|monitoring|opengraph-image.png|ingest|api|login|api/emails).*)",
	],
};