42 lines
1.2 KiB
TypeScript
42 lines
1.2 KiB
TypeScript
import { authMiddleware } from '@konobangu/auth/middleware';
|
|
import { env } from '@konobangu/env';
|
|
import { parseError } from '@konobangu/observability/error';
|
|
import { secure } from '@konobangu/security';
|
|
import {
|
|
noseconeConfig,
|
|
noseconeMiddleware,
|
|
} from '@konobangu/security/middleware';
|
|
import { NextResponse } from 'next/server';
|
|
|
|
export const config = {
|
|
// matcher tells Next.js which routes to run the middleware on. This runs the
|
|
// middleware on all routes except for static assets and Posthog ingest
|
|
matcher: ['/((?!_next/static|_next/image|ingest|favicon.ico).*)'],
|
|
};
|
|
|
|
const securityHeaders = noseconeMiddleware(noseconeConfig);
|
|
|
|
export default authMiddleware(async (_auth, request) => {
|
|
if (!env.ARCJET_KEY) {
|
|
return securityHeaders();
|
|
}
|
|
|
|
try {
|
|
await secure(
|
|
[
|
|
// See https://docs.arcjet.com/bot-protection/identifying-bots
|
|
'CATEGORY:SEARCH_ENGINE', // Allow search engines
|
|
'CATEGORY:PREVIEW', // Allow preview links to show OG images
|
|
'CATEGORY:MONITOR', // Allow uptime monitoring services
|
|
],
|
|
request
|
|
);
|
|
|
|
return securityHeaders();
|
|
} catch (error) {
|
|
const message = parseError(error);
|
|
|
|
return NextResponse.json({ error: message }, { status: 403 });
|
|
}
|
|
});
|