a1347aed28
Renomeia o projeto em ~40 arquivos (package.json, manifests, layouts, componentes, server actions, emails, Docker, docs, landing page). Adiciona suporte a multi-domínio via PUBLIC_DOMAIN onde o domínio público serve apenas a landing page sem botões de auth. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
83 lines
2.0 KiB
TypeScript
83 lines
2.0 KiB
TypeScript
import { type NextRequest, NextResponse } from "next/server";
|
|
import { auth } from "@/lib/auth/config";
|
|
|
|
// Rotas protegidas que requerem autenticação
|
|
const PROTECTED_ROUTES = [
|
|
"/ajustes",
|
|
"/anotacoes",
|
|
"/calendario",
|
|
"/cartoes",
|
|
"/categorias",
|
|
"/contas",
|
|
"/dashboard",
|
|
"/insights",
|
|
"/lancamentos",
|
|
"/orcamentos",
|
|
"/pagadores",
|
|
];
|
|
|
|
// Rotas públicas (não requerem autenticação)
|
|
const PUBLIC_AUTH_ROUTES = ["/login", "/signup"];
|
|
|
|
export default async function proxy(request: NextRequest) {
|
|
const { pathname } = request.nextUrl;
|
|
|
|
// Multi-domain: block all routes except landing on public domain
|
|
// Normalize PUBLIC_DOMAIN: strip protocol and port if provided
|
|
const publicDomain = process.env.PUBLIC_DOMAIN?.replace(
|
|
/^https?:\/\//,
|
|
"",
|
|
).replace(/:\d+$/, "");
|
|
const hostname = request.headers.get("host")?.replace(/:\d+$/, "");
|
|
|
|
if (publicDomain && hostname === publicDomain) {
|
|
if (pathname !== "/") {
|
|
return NextResponse.redirect(new URL("/", request.url));
|
|
}
|
|
return NextResponse.next();
|
|
}
|
|
|
|
// Validate actual session, not just cookie existence
|
|
const session = await auth.api.getSession({
|
|
headers: request.headers,
|
|
});
|
|
|
|
const isAuthenticated = !!session?.user;
|
|
|
|
// Redirect authenticated users away from login/signup pages
|
|
if (isAuthenticated && PUBLIC_AUTH_ROUTES.includes(pathname)) {
|
|
return NextResponse.redirect(new URL("/dashboard", request.url));
|
|
}
|
|
|
|
// Redirect unauthenticated users trying to access protected routes
|
|
const isProtectedRoute = PROTECTED_ROUTES.some((route) =>
|
|
pathname.startsWith(route),
|
|
);
|
|
|
|
if (!isAuthenticated && isProtectedRoute) {
|
|
return NextResponse.redirect(new URL("/login", request.url));
|
|
}
|
|
|
|
return NextResponse.next();
|
|
}
|
|
|
|
export const config = {
|
|
// Apply middleware to protected and auth routes
|
|
matcher: [
|
|
"/",
|
|
"/ajustes/:path*",
|
|
"/anotacoes/:path*",
|
|
"/calendario/:path*",
|
|
"/cartoes/:path*",
|
|
"/categorias/:path*",
|
|
"/contas/:path*",
|
|
"/dashboard/:path*",
|
|
"/insights/:path*",
|
|
"/lancamentos/:path*",
|
|
"/orcamentos/:path*",
|
|
"/pagadores/:path*",
|
|
"/login",
|
|
"/signup",
|
|
],
|
|
};
|