allagroup/alla-allaos-fullstack
Template
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

uat-seed-script

Browse Source
This commit is contained in:
phaichayon
2026-06-30 10:48:15 +07:00
parent e4573ac0c9
commit e12ae120b0
31 changed files with 1791 additions and 314 deletions
Download Patch File Download Diff File Expand all files Collapse all files

44
src/proxy.ts
View File

@@ -1,29 +1,39 @@
import { auth } from '@/auth';
import { NextResponse } from 'next/server';
import { auth } from "@/auth";
import { NextResponse } from "next/server";
const protectedApiPrefixes = ['/api/products', '/api/organizations', '/api/users'];
const superAdminOnlyRoutes = ['/dashboard/workspaces'];
const organizationAdminRoutes = ['/dashboard/users', '/dashboard/workspaces/team'];
const protectedApiPrefixes = [
"/api/products",
"/api/organizations",
"/api/users",
];
const superAdminOnlyRoutes = ["/dashboard/workspaces"];
const organizationAdminRoutes = [
"/dashboard/users",
"/dashboard/workspaces/team",
];
export default auth((req) => {
const pathname = req.nextUrl.pathname;
const isDashboardRoute = pathname.startsWith('/dashboard');
const isProtectedApiRoute = protectedApiPrefixes.some((prefix) => pathname.startsWith(prefix));
const isDashboardRoute = pathname.startsWith("/dashboard/crm");
const isProtectedApiRoute = protectedApiPrefixes.some((prefix) =>
pathname.startsWith(prefix),
);
const user = req.auth?.user;
const isSignedIn = !!user;
const isSuperAdmin = user?.systemRole === 'super_admin';
const isSuperAdmin = user?.systemRole === "super_admin";
const isOrganizationAdmin =
isSuperAdmin ||
(user?.activeOrganizationId &&
(user.activeMembershipRole === 'admin' || user.activePermissions?.includes('users:manage')));
(user.activeMembershipRole === "admin" ||
user.activePermissions?.includes("users:manage")));
if (!isSignedIn && (isDashboardRoute || isProtectedApiRoute)) {
if (isProtectedApiRoute) {
return NextResponse.json({ message: 'Unauthorized' }, { status: 401 });
return NextResponse.json({ message: "Unauthorized" }, { status: 401 });
}
const signInUrl = new URL('/auth/sign-in', req.nextUrl.origin);
signInUrl.searchParams.set('callbackUrl', pathname);
const signInUrl = new URL("/auth/sign-in", req.nextUrl.origin);
signInUrl.searchParams.set("callbackUrl", pathname);
return NextResponse.redirect(signInUrl);
}
@@ -32,7 +42,7 @@ export default auth((req) => {
superAdminOnlyRoutes.some((prefix) => pathname.startsWith(prefix)) &&
!isSuperAdmin
) {
return NextResponse.redirect(new URL('/dashboard', req.nextUrl.origin));
return NextResponse.redirect(new URL("/dashboard", req.nextUrl.origin));
}
if (
@@ -40,7 +50,7 @@ export default auth((req) => {
organizationAdminRoutes.some((prefix) => pathname.startsWith(prefix)) &&
!isOrganizationAdmin
) {
return NextResponse.redirect(new URL('/dashboard', req.nextUrl.origin));
return NextResponse.redirect(new URL("/dashboard", req.nextUrl.origin));
}
return NextResponse.next();
@@ -48,7 +58,7 @@ export default auth((req) => {
export const config = {
matcher: [
'/((?!_next|[^?]*\\.(?:html?|css|js(?!on)|jpe?g|webp|png|gif|svg|ttf|woff2?|ico|csv|docx?|xlsx?|zip|webmanifest)).*)',
'/(api|trpc)(.*)'
]
"/((?!_next|[^?]*\\.(?:html?|css|js(?!on)|jpe?g|webp|png|gif|svg|ttf|woff2?|ico|csv|docx?|xlsx?|zip|webmanifest)).*)",
"/(api|trpc)(.*)",
],
};