89 lines
2.2 KiB
TypeScript
89 lines
2.2 KiB
TypeScript
import { NextResponse } from "next/server";
|
|
import type { NextRequest } from "next/server";
|
|
|
|
// Rutas públicas que no requieren autenticación
|
|
const PUBLIC_ROUTES = ["/login"];
|
|
|
|
// Rutas que siempre deben ser accesibles (assets, API, etc.)
|
|
const ALWAYS_ALLOWED = ["/_next", "/api", "/favicon.ico", "/avatar.jpg"];
|
|
|
|
async function verifyDolibarrToken(token: string): Promise<boolean> {
|
|
const apiUrl = process.env.DOLIBARR_API_URL || process.env.NEXT_PUBLIC_API_URL;
|
|
|
|
if (!apiUrl) {
|
|
return false;
|
|
}
|
|
|
|
try {
|
|
const response = await fetch(`${apiUrl}/users/info?DOLAPIKEY=${token}`, {
|
|
headers: {
|
|
Accept: "application/json",
|
|
},
|
|
cache: "no-store",
|
|
});
|
|
|
|
return response.ok;
|
|
} catch {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
export async function middleware(request: NextRequest) {
|
|
const { pathname } = request.nextUrl;
|
|
|
|
// Permitir siempre assets y APIs
|
|
if (ALWAYS_ALLOWED.some((route) => pathname.startsWith(route))) {
|
|
return NextResponse.next();
|
|
}
|
|
|
|
// Verificar si es ruta pública
|
|
const isPublicRoute = PUBLIC_ROUTES.some((route) => pathname === route);
|
|
|
|
// Obtener token de las cookies (si existe)
|
|
const token = request.cookies.get("dolibarr_auth_token")?.value;
|
|
|
|
if (!token) {
|
|
if (!isPublicRoute) {
|
|
const loginUrl = new URL("/login", request.url);
|
|
loginUrl.searchParams.set("redirect", pathname);
|
|
return NextResponse.redirect(loginUrl);
|
|
}
|
|
|
|
return NextResponse.next();
|
|
}
|
|
|
|
const isValid = await verifyDolibarrToken(token);
|
|
|
|
if (!isValid) {
|
|
const loginUrl = new URL("/login", request.url);
|
|
loginUrl.searchParams.set("redirect", pathname);
|
|
|
|
const response = NextResponse.redirect(loginUrl);
|
|
response.cookies.set("dolibarr_auth_token", "", {
|
|
path: "/",
|
|
expires: new Date(0),
|
|
});
|
|
|
|
return response;
|
|
}
|
|
|
|
if (pathname === "/login") {
|
|
return NextResponse.redirect(new URL("/", request.url));
|
|
}
|
|
|
|
return NextResponse.next();
|
|
}
|
|
|
|
export const config = {
|
|
matcher: [
|
|
/*
|
|
* Match all request paths except:
|
|
* - _next/static (static files)
|
|
* - _next/image (image optimization files)
|
|
* - favicon.ico (favicon file)
|
|
* - public folder
|
|
*/
|
|
"/((?!_next/static|_next/image|favicon.ico|.*\\.(?:svg|png|jpg|jpeg|gif|webp)$).*)",
|
|
],
|
|
};
|