Skip to content

Commit a9a1d48

Browse files
committed
refactor(middleware): remove origin validation logic for cleaner middleware
1 parent a79f205 commit a9a1d48

File tree

1 file changed

+4
-17
lines changed

1 file changed

+4
-17
lines changed

src/middleware.ts

Lines changed: 4 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -1,26 +1,13 @@
11
import { NextResponse, type NextRequest } from 'next/server';
2-
import {
3-
getOrigin,
4-
getBearerToken,
5-
generateNextResponse
6-
} from '@lib/helper-server';
7-
import { frontendEnv, IS_DEVELOPMENT } from '@lib/env';
2+
import { getBearerToken, generateNextResponse } from '@lib/helper-server';
3+
import { frontendEnv } from '@lib/env';
84

95
export function middleware(req: NextRequest): NextResponse {
10-
const origin = getOrigin(req);
11-
12-
const isValidOrigin = IS_DEVELOPMENT
13-
? [frontendEnv.NEXT_PUBLIC_URL, 'http://localhost:3000'].includes(
14-
origin as string
15-
)
16-
: origin === frontendEnv.NEXT_PUBLIC_URL;
17-
18-
if (!isValidOrigin) return generateNextResponse(403, 'Forbidden');
19-
206
const bearerToken = getBearerToken(req);
217

22-
if (bearerToken !== frontendEnv.NEXT_PUBLIC_OWNER_BEARER_TOKEN)
8+
if (bearerToken !== frontendEnv.NEXT_PUBLIC_OWNER_BEARER_TOKEN) {
239
return generateNextResponse(401, 'Unauthorized');
10+
}
2411

2512
return NextResponse.next();
2613
}

0 commit comments

Comments
 (0)