55 lines
1.8 KiB
TypeScript
55 lines
1.8 KiB
TypeScript
import { type NextRequest, NextResponse } from 'next/server';
|
|
import { updateSession } from '@/utils/supabase/middleware';
|
|
|
|
// Edge Runtime에서 Web Crypto API로 관리자 토큰 검증
|
|
async function verifyAdminToken(token: string): Promise<boolean> {
|
|
try {
|
|
const secret = process.env.ADMIN_JWT_SECRET;
|
|
if (!secret) return false;
|
|
|
|
const parts = token.split('.');
|
|
if (parts.length !== 2) return false;
|
|
const [encoded, sig] = parts;
|
|
|
|
const keyData = new TextEncoder().encode(secret);
|
|
const key = await crypto.subtle.importKey(
|
|
'raw', keyData, { name: 'HMAC', hash: 'SHA-256' }, false, ['verify']
|
|
);
|
|
|
|
const sigBuffer = Uint8Array.from(
|
|
atob(sig.replace(/-/g, '+').replace(/_/g, '/')),
|
|
c => c.charCodeAt(0)
|
|
);
|
|
const dataBuffer = new TextEncoder().encode(encoded);
|
|
|
|
const valid = await crypto.subtle.verify('HMAC', key, sigBuffer, dataBuffer);
|
|
if (!valid) return false;
|
|
|
|
const paddedEncoded = encoded.replace(/-/g, '+').replace(/_/g, '/');
|
|
const payload = JSON.parse(atob(paddedEncoded + '='.repeat((4 - paddedEncoded.length % 4) % 4)));
|
|
return Date.now() < payload.exp;
|
|
} catch {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
export async function middleware(request: NextRequest) {
|
|
const { pathname } = request.nextUrl;
|
|
|
|
// /admin 경로 보호 (/admin/login 제외)
|
|
if (pathname.startsWith('/admin') && !pathname.startsWith('/admin/login')) {
|
|
const token = request.cookies.get('admin_token')?.value;
|
|
if (!token || !(await verifyAdminToken(token))) {
|
|
return NextResponse.redirect(new URL('/admin/login', request.url));
|
|
}
|
|
}
|
|
|
|
return await updateSession(request);
|
|
}
|
|
|
|
export const config = {
|
|
matcher: [
|
|
'/((?!_next/static|_next/image|favicon.ico|api/telegram/webhook|.*\\.(?:svg|png|jpg|jpeg|gif|webp)$).*)',
|
|
],
|
|
};
|