36 lines
1.0 KiB
TypeScript
36 lines
1.0 KiB
TypeScript
|
import { NextResponse, type NextRequest } from 'next/server';
|
|||
|
|
|
|||
|
|
const TOKEN_COOKIE = process.env.NEXT_PUBLIC_TOKEN_KEY ?? 'admin_token';
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 后台路由鉴权中间件（Edge 运行时）
|
|||
|
|
* - /admin/login 放行
|
|||
|
|
* - 其他 /admin 路径无 token cookie → 跳登录
|
|||
|
|
*
|
|||
|
|
* 说明：token 真值由前端 adminStore 同步写入 cookie，
|
|||
|
|
* 这里仅做"是否已登录"的初步判断，最终有效性由后端 JWT 校验。
|
|||
|
|
*/
|
|||
|
|
export function middleware(req: NextRequest): NextResponse {
|
|||
|
|
const { pathname, search } = req.nextUrl;
|
|||
|
|
|
|||
|
|
if (!pathname.startsWith('/admin')) {
|
|||
|
|
return NextResponse.next();
|
|||
|
|
}
|
|||
|
|
if (pathname === '/admin/login') {
|
|||
|
|
return NextResponse.next();
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
const token = req.cookies.get(TOKEN_COOKIE)?.value;
|
|||
|
|
if (!token) {
|
|||
|
|
const url = req.nextUrl.clone();
|
|||
|
|
url.pathname = '/admin/login';
|
|||
|
|
url.searchParams.set('redirect', encodeURIComponent(pathname + search));
|
|||
|
|
return NextResponse.redirect(url);
|
|||
|
|
}
|
|||
|
|
return NextResponse.next();
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
export const config = {
|
|||
|
|
matcher: ['/admin/:path*'],
|
|||
|
|
};
|