64ce70daa4
- NextAuth v5 with email+password credentials, JWT sessions - Registration, login, email verification, password reset flows - Stripe integration: Free (15/day), Starter ($5/1k/mo), Pro ($20/100k/mo) - API key management (cb_ prefix) with hash-based validation - Dashboard with generations history, settings, billing management - Rate limiting: Redis daily counter (free), DB monthly (paid) - Generate route auth: Bearer API key + session, anonymous allowed - Worker userId propagation for generation history - Pricing section on landing page, auth-aware navbar - Middleware with route protection, CORS for codeboard.vectry.tech - Docker env vars for auth, Stripe, email (smtp.migadu.com)
91 lines
2.4 KiB
TypeScript
91 lines
2.4 KiB
TypeScript
import NextAuth from "next-auth";
|
|
import { NextResponse } from "next/server";
|
|
import authConfig from "./auth.config";
|
|
|
|
const { auth } = NextAuth(authConfig);
|
|
|
|
const publicPaths = [
|
|
"/",
|
|
"/docs",
|
|
"/generate",
|
|
"/history",
|
|
"/api/auth",
|
|
"/api/generate",
|
|
"/api/generations",
|
|
"/api/health",
|
|
"/api/stripe/webhook",
|
|
"/forgot-password",
|
|
"/reset-password",
|
|
"/verify-email",
|
|
];
|
|
|
|
function isPublicPath(pathname: string): boolean {
|
|
return publicPaths.some(
|
|
(p) => pathname === p || pathname.startsWith(`${p}/`)
|
|
);
|
|
}
|
|
|
|
const ALLOWED_ORIGINS = new Set([
|
|
"https://codeboard.vectry.tech",
|
|
"http://localhost:3000",
|
|
]);
|
|
|
|
function corsHeaders(origin: string | null): Record<string, string> {
|
|
const allowedOrigin = origin && ALLOWED_ORIGINS.has(origin)
|
|
? origin
|
|
: "https://codeboard.vectry.tech";
|
|
return {
|
|
"Access-Control-Allow-Origin": allowedOrigin,
|
|
"Access-Control-Allow-Methods": "GET, POST, PUT, DELETE, OPTIONS",
|
|
"Access-Control-Allow-Headers": "Content-Type, Authorization",
|
|
"Access-Control-Max-Age": "86400",
|
|
};
|
|
}
|
|
|
|
export default auth((req) => {
|
|
const { pathname } = req.nextUrl;
|
|
const isLoggedIn = !!req.auth;
|
|
const origin = req.headers.get("origin");
|
|
|
|
if (req.method === "OPTIONS") {
|
|
return new NextResponse(null, { status: 204, headers: corsHeaders(origin) });
|
|
}
|
|
|
|
const response = (() => {
|
|
if (isPublicPath(pathname)) {
|
|
if (isLoggedIn && (pathname === "/login" || pathname === "/register")) {
|
|
return NextResponse.redirect(new URL("/dashboard", req.nextUrl.origin));
|
|
}
|
|
return NextResponse.next();
|
|
}
|
|
|
|
if (pathname === "/login" || pathname === "/register") {
|
|
if (isLoggedIn) {
|
|
return NextResponse.redirect(new URL("/dashboard", req.nextUrl.origin));
|
|
}
|
|
return NextResponse.next();
|
|
}
|
|
|
|
if (pathname.startsWith("/dashboard") && !isLoggedIn) {
|
|
const loginUrl = new URL("/login", req.nextUrl.origin);
|
|
loginUrl.searchParams.set("callbackUrl", pathname);
|
|
return NextResponse.redirect(loginUrl);
|
|
}
|
|
|
|
return NextResponse.next();
|
|
})();
|
|
|
|
if (pathname.startsWith("/api/")) {
|
|
const headers = corsHeaders(origin);
|
|
for (const [key, value] of Object.entries(headers)) {
|
|
response.headers.set(key, value);
|
|
}
|
|
}
|
|
|
|
return response;
|
|
});
|
|
|
|
export const config = {
|
|
matcher: ["/((?!_next/static|_next/image|favicon.ico|og-image.png).*)"],
|
|
};
|