stripstream-librarian/apps/backoffice/proxy.ts

import { NextRequest, NextResponse } from "next/server";
import { jwtVerify } from "jose";
import { SESSION_COOKIE } from "./lib/session";

function getSecret(): Uint8Array {
  const secret = process.env.SESSION_SECRET;
  if (!secret) return new TextEncoder().encode("dev-insecure-secret");
  return new TextEncoder().encode(secret);
}

/** Paths where filter persistence is active */
const FILTER_PATHS = ["/series", "/books", "/authors"];

/** Convert a basePath to a cookie name: /series → filters_series */
function filterCookieName(basePath: string): string {
  return `filters_${basePath.replace(/^\//, "").replace(/\//g, "_")}`;
}

export async function proxy(req: NextRequest) {
  const { pathname, searchParams } = req.nextUrl;

  // Skip auth for login page and auth API routes
  if (pathname.startsWith("/login") || pathname.startsWith("/api/auth")) {
    return NextResponse.next();
  }

  const token = req.cookies.get(SESSION_COOKIE)?.value;
  if (token) {
    try {
      await jwtVerify(token, getSecret());
    } catch {
      // Token invalid or expired — redirect to login
      const loginUrl = new URL("/login", req.url);
      loginUrl.searchParams.set("from", pathname);
      return NextResponse.redirect(loginUrl);
    }

    // Restore saved filters from cookie for filter pages
    if (FILTER_PATHS.includes(pathname)) {
      const nonPaginationParams = Array.from(searchParams.entries()).filter(
        ([key]) => key !== "page" && key !== "limit"
      );
      if (nonPaginationParams.length === 0) {
        const cookieName = filterCookieName(pathname);
        const cookie = req.cookies.get(cookieName);
        if (cookie?.value) {
          try {
            const filters: Record<string, string> = JSON.parse(cookie.value);
            const entries = Object.entries(filters).filter(([, v]) => v && v.trim());
            if (entries.length > 0) {
              const url = req.nextUrl.clone();
              for (const [key, value] of entries) {
                url.searchParams.set(key, value);
              }
              return NextResponse.redirect(url);
            }
          } catch {}
        }
      }
    }

    return NextResponse.next();
  }

  const loginUrl = new URL("/login", req.url);
  loginUrl.searchParams.set("from", pathname);
  return NextResponse.redirect(loginUrl);
}

export const config = {
  matcher: [
    "/((?!_next/static|_next/image|favicon\\.ico|logo\\.png|.*\\.svg).*)",
  ],
};