Toogether/Webapp
2
0
Fork 0
Code Issues Pull Requests Actions Releases Activity

feat: protect admin routes with OIDC roles

Browse Source
This commit is contained in:
Rémi 2025-01-05 02:10:54 +01:00
parent f0b498ca18
commit d45f79a3d9
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/middleware.ts
View File

@ -17,6 +17,14 @@ export async function middleware(req: NextRequest) {
return NextResponse.redirect(url); return NextResponse.redirect(url);
} }
if (
!token?.user.roles.includes("admin") &&
url.pathname.startsWith("/admin")
) {
url.pathname = "/";
return NextResponse.redirect(url);
}
return NextResponse.next(); return NextResponse.next();
} }