This commit is contained in:
@@ -1,41 +1,59 @@
|
||||
import { NextRequest, NextResponse } from "next/server";
|
||||
import { getSessionCookieName, verifySessionToken } from "@/lib/auth";
|
||||
|
||||
function normalizeHost(host: string) {
|
||||
return host.split(":")[0].toLowerCase();
|
||||
}
|
||||
|
||||
export async function middleware(request: NextRequest) {
|
||||
const { pathname, search } = request.nextUrl;
|
||||
const host = request.headers.get("host") || "";
|
||||
const crmHost = process.env.CRM_HOST || "crm.workparking.ru";
|
||||
|
||||
if (!pathname.startsWith("/admin")) {
|
||||
return NextResponse.next();
|
||||
}
|
||||
|
||||
if (host !== crmHost) {
|
||||
const redirectUrl = new URL(request.url);
|
||||
redirectUrl.host = crmHost;
|
||||
redirectUrl.protocol = "https:";
|
||||
return NextResponse.redirect(redirectUrl);
|
||||
}
|
||||
|
||||
const cookieName = getSessionCookieName();
|
||||
const token = request.cookies.get(cookieName)?.value;
|
||||
const isAuthed = await verifySessionToken(token);
|
||||
const pathname = request.nextUrl.pathname;
|
||||
const search = request.nextUrl.search;
|
||||
const host = normalizeHost(request.headers.get("host") || "");
|
||||
const crmHost = (process.env.CRM_HOST || "crm.workparking.ru").toLowerCase();
|
||||
|
||||
const isCrmHost = host === crmHost;
|
||||
const isAdminPath = pathname.startsWith("/admin");
|
||||
const isLoginPage = pathname === "/admin/login";
|
||||
|
||||
if (!isAuthed && !isLoginPage) {
|
||||
const loginUrl = new URL("/admin/login", request.url);
|
||||
loginUrl.searchParams.set("next", `${pathname}${search}`);
|
||||
return NextResponse.redirect(loginUrl);
|
||||
const token = request.cookies.get(getSessionCookieName())?.value;
|
||||
const isAuthed = await verifySessionToken(token);
|
||||
|
||||
// Если открыли crm.workparking.ru/ — сразу ведём в CRM
|
||||
if (isCrmHost && pathname === "/") {
|
||||
const url = request.nextUrl.clone();
|
||||
url.pathname = isAuthed ? "/admin/leads" : "/admin/login";
|
||||
url.search = "";
|
||||
return NextResponse.redirect(url);
|
||||
}
|
||||
|
||||
if (isAuthed && isLoginPage) {
|
||||
return NextResponse.redirect(new URL("/admin/leads", request.url));
|
||||
// Если admin открыли не на CRM-домене — уводим на CRM без порта
|
||||
if (isAdminPath && !isCrmHost) {
|
||||
const url = request.nextUrl.clone();
|
||||
url.protocol = "https";
|
||||
url.hostname = crmHost;
|
||||
url.port = "";
|
||||
return NextResponse.redirect(url);
|
||||
}
|
||||
|
||||
if (isAdminPath) {
|
||||
if (!isAuthed && !isLoginPage) {
|
||||
const loginUrl = request.nextUrl.clone();
|
||||
loginUrl.pathname = "/admin/login";
|
||||
loginUrl.search = `?next=${encodeURIComponent(`${pathname}${search}`)}`;
|
||||
return NextResponse.redirect(loginUrl);
|
||||
}
|
||||
|
||||
if (isAuthed && isLoginPage) {
|
||||
const url = request.nextUrl.clone();
|
||||
url.pathname = "/admin/leads";
|
||||
url.search = "";
|
||||
return NextResponse.redirect(url);
|
||||
}
|
||||
}
|
||||
|
||||
return NextResponse.next();
|
||||
}
|
||||
|
||||
export const config = {
|
||||
matcher: ["/admin/:path*"],
|
||||
matcher: ["/", "/admin/:path*"],
|
||||
};
|
||||
Reference in New Issue
Block a user