middleware.ts

import {withAuth} from "next-auth/middleware"
import {NextResponse} from "next/server"

import {UserRole} from "./models/User"

export default withAuth(
	function middleware(req) {
		const path = req.nextUrl.pathname
		const token = req.nextauth.token

		if (isOnlyForUnauthorized(path) && token !== null) {
			return NextResponse.redirect(new URL("/", req.url))
		}
	},
	{
		callbacks: {
			authorized: ({token, req}) => {
				const path = req.nextUrl.pathname
				if (isOnlyForUnauthorized(path)) {
					return true
				}

				if (token === null) {
					return false
				}

				if (isOnlyForAuthorized(path)) {
					return true
				}

				if (isOnlyForAdmin(path)) {
					return token.userData.role === UserRole.ADMIN
				}

				return token.userData.role !== UserRole.USER
			},
		},
	}
)

const isOnlyForUnauthorized = (path: string) => {
	return path.startsWith("/auth")
}

const isOnlyForAuthorized = (path: string) => {
	return path.startsWith("/user")
}

const isOnlyForAdmin = (path: string) => {
	return path === "/tos/edit" || path === "/admin"
}

export const config = {
	matcher: [
		"/add",
		"/edit/:id*",
		"/auth/signIn",
		"/auth/signUp",
		"/auth/signUp/activate",
		"/auth/signUp/activate/:hash*",
		"/tos/edit",
		"/admin",
		"/user",
		"/user/signout",
	],
	runtime: "experimental-edge",
	unstable_allowDynamic: ["/node_modules/mongoose/**"],
}