starred/zenblog
1
0
Fork 0
mirror of https://github.com/jordienr/zenblog.git synced 2026-08-24 02:34:19 -05:00
Code Issues Packages Projects Releases Wiki Activity

harden homepage auth proxy refresh

Browse Source
This commit is contained in:
Jordi Enric
2026-04-05 19:27:29 +02:00
parent 752fe2a5e6
commit aad58f2988
1 changed files with 61 additions and 47 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/web/src/utils/supabase/middleware.ts
+61 -47
View File
@@ -8,53 +8,67 @@ export async function updateSession(request: NextRequest) {
},
});
const supabase = createServerClient(
process.env.NEXT_PUBLIC_SUPABASE_URL!,
process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,
{
cookies: {
get(name: string) {
return request.cookies.get(name)?.value;
},
set(name: string, value: string, options: CookieOptions) {
request.cookies.set({
name,
value,
...options,
});
response = NextResponse.next({
request: {
headers: request.headers,
},
});
response.cookies.set({
name,
value,
...options,
});
},
remove(name: string, options: CookieOptions) {
request.cookies.set({
name,
value: "",
...options,
});
response = NextResponse.next({
request: {
headers: request.headers,
},
});
response.cookies.set({
name,
value: "",
...options,
});
try {
const supabase = createServerClient(
process.env.NEXT_PUBLIC_SUPABASE_URL!,
process.env.NEXT_PUBLIC_SUPABASE_ANON_KEY!,
{
cookies: {
get(name: string) {
return request.cookies.get(name)?.value;
},
set(name: string, value: string, options: CookieOptions) {
request.cookies.set({
name,
value,
...options,
});
response = NextResponse.next({
request: {
headers: request.headers,
},
});
response.cookies.set({
name,
value,
...options,
});
},
remove(name: string, options: CookieOptions) {
request.cookies.set({
name,
value: "",
...options,
});
response = NextResponse.next({
request: {
headers: request.headers,
},
});
response.cookies.set({
name,
value: "",
...options,
});
},
},
}
);
await supabase.auth.getUser();
return response;
} catch (error) {
console.error("Supabase proxy session refresh failed", {
pathname: request.nextUrl.pathname,
error,
});
// Never take down public pages because auth refresh failed for one request.
return NextResponse.next({
request: {
headers: request.headers,
},
}
);
await supabase.auth.getUser();
return response;
});
}
}