39525-vm/lib/supabase/middleware.ts
2026-04-08 23:03:40 +00:00

72 lines
2.2 KiB
TypeScript

import { createServerClient } from '@supabase/ssr'
import { NextResponse, type NextRequest } from 'next/server'
export async function updateSession(request: NextRequest) {
let supabaseResponse = NextResponse.next({
request,
})
const supabase = createServerClient(
process.env.NEXT_PUBLIC_SUPABASE_URL || "https://ekbpexbhuochrplzorce.supabase.co"!,
process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY || "sb_publishable__UII_iKx3pgvLQvc1xrN1w_qnwP6JOv" || process.env.NEXT_PUBLIC_SUPABASE_PUBLISHABLE_DEFAULT_KEY!,
{
cookies: {
getAll() {
return request.cookies.getAll()
},
setAll(cookiesToSet) {
cookiesToSet.forEach(({ name, value }) =>
request.cookies.set(name, value),
)
supabaseResponse = NextResponse.next({
request,
})
cookiesToSet.forEach(({ name, value, options }) =>
supabaseResponse.cookies.set(name, value, options),
)
},
},
},
)
// Intercept auth confirmation codes on any route and redirect to callback
const code = request.nextUrl.searchParams.get('code')
if (code && !request.nextUrl.pathname.startsWith('/auth/callback')) {
const url = request.nextUrl.clone()
url.pathname = '/auth/callback'
url.searchParams.set('code', code)
return NextResponse.redirect(url)
}
const {
data: { user },
} = await supabase.auth.getUser()
// Redirect unauthenticated users trying to access the app
const isAuthRoute = request.nextUrl.pathname.startsWith('/auth')
const isApiRoute = request.nextUrl.pathname.startsWith('/api')
const isPublicRoute = request.nextUrl.pathname === '/'
if (!user && !isAuthRoute && !isApiRoute && !isPublicRoute) {
const url = request.nextUrl.clone()
url.pathname = '/auth/login'
return NextResponse.redirect(url)
}
// Redirect authenticated users away from auth pages to the feed
if (user && isAuthRoute) {
const url = request.nextUrl.clone()
url.pathname = '/feed'
return NextResponse.redirect(url)
}
// Redirect root to feed if authenticated
if (user && isPublicRoute) {
const url = request.nextUrl.clone()
url.pathname = '/feed'
return NextResponse.redirect(url)
}
return supabaseResponse
}