1st push

middleware.js

@@ -0,0 +1,73 @@
+import { NextRequest, NextResponse } from "next/server"
+import { refreshAccessToken } from "./utils/auth"
+import { jwtVerify } from "jose"
+const secretKey = new TextEncoder().encode("Swe4g7c?UBm5Nrd96vhsVDtkyJFbqKMTm!TMw5BDRLtaCFAXNvbq?s4rGKQSZnUP")
+
+const verifyJWT = async (token) => {
+  const { payload, protectedHeader } = await jwtVerify(token, secretKey)
+  return payload
+}
+
+export default async function middleware(req, res) {
+  // Extract token from request headers or cookies or wherever it's stored
+  const token = req.cookies.get("token")
+
+  if (!token || token.value == "") {
+    if (req.url == "http://localhost:3000/login") {
+    } else {
+      return NextResponse.redirect(new URL("/login", req.url))
+    }
+  } else {
+    if (req.url == "http://localhost:3000/login") {
+      return NextResponse.redirect("http://localhost:3000/home")
+    }
+  }
+
+  try {
+    // Verify the token
+    console.log("ASdasdasssssssssssss")
+    console.log(token.value)
+    const payload = await verifyJWT(token.value)
+
+    // Attach the decoded user object to the request
+    // req.user = decoded.user;
+    //  return NextResponse.redirect(new URL( req.url, '/home'))
+    // Validate if the user is the one that is present in cookie
+  } catch (error) {
+    if (error.name === "JWTExpired") {
+      console.log(error)
+      //delete the token from cookie
+      console.log("deleting the token")
+      //renew the token
+      // console.log(req.cookies.get('rtoken'));
+
+      const rtoken = req.cookies.get("rtoken")
+      if (rtoken == undefined) {
+        console.log("undefined")
+      }
+      console.log("defined")
+
+      const newtoken = await refreshAccessToken(rtoken)
+      if (newtoken == undefined) {
+        const res = NextResponse.redirect(new URL("/login", req.url)) // creates an actual instance
+        res.cookies.set("token", newtoken)
+        return res
+      }
+      console.log("defined")
+      const res = NextResponse.next() // creates an actual instance
+      res.cookies.set("token", newtoken)
+      return res
+    }
+    console.log(error)
+    // Handle other JWT errors
+    // return Response.json({ message: 'Unauthorized' }, { status: 401 });
+
+    // const res = NextResponse.redirect(new URL( '/login',req.url))  // creates an actual instance
+    // res.cookies.delete('token') // can be called on an instance
+    // return res
+  }
+}
+
+export const config = {
+  matcher: ["/((?!api|_next/static|_next/image|favicon.ico).*)"],
+}