proxy.ts

import { NextResponse } from "next/server"
import type { NextRequest } from "next/server"
import { createServerClient } from "@supabase/ssr"

export async function proxy(req: NextRequest) {
  const res = NextResponse.next()
  const supabaseUrl = process.env.NEXT_PUBLIC_JIOBASE_URL || process.env.NEXT_PUBLIC_SUPABASE_URL

  if (!supabaseUrl || !process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY) {
    return res
  }

  const supabase = createServerClient(
    supabaseUrl,
    process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY,
    {
      cookies: {
        get(name: string) {
          return req.cookies.get(name)?.value
        },
        set(name, value, options) {
          res.cookies.set({ name, value, ...options })
        },
        remove(name, options) {
          res.cookies.set({ name, value: "", ...options })
        },
      },
    }
  )

  const {
    data: { user },
  } = await supabase.auth.getUser()

  const isProtected =
    req.nextUrl.pathname.startsWith("/dashboard") ||
    req.nextUrl.pathname.startsWith("/feedback") ||
    req.nextUrl.pathname.startsWith("/checkpoints") ||
    req.nextUrl.pathname.startsWith("/announcements") ||
    req.nextUrl.pathname.startsWith("/profile")

  if (!user && isProtected) {
    return NextResponse.redirect(new URL("/login", req.url))
  }

  return res
}

export const config = {
  matcher: [
    "/dashboard/:path*",
    "/feedback/:path*",
    "/checkpoints/:path*",
    "/announcements/:path*",
    "/profile/:path*",
  ],
}