fix: Middleware aktiviert — proxy.ts → middleware.ts
proxy.ts wurde nie als Next.js-Middleware erkannt (falscher Dateiname, falscher Exportname). Die mustChangePassword-Weiterleitung und der Login-Guard liefen daher nie. Zusätzlich Fallback-Secret entfernt. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
@@ -3,10 +3,11 @@ import type { NextRequest } from 'next/server';
|
|||||||
import { jwtVerify } from 'jose';
|
import { jwtVerify } from 'jose';
|
||||||
|
|
||||||
const SESSION_COOKIE_NAME = 'logbuch_session';
|
const SESSION_COOKIE_NAME = 'logbuch_session';
|
||||||
const secretKey = process.env.AUTH_SECRET || 'logbuch-secret-change-in-production';
|
const secretKey = process.env.AUTH_SECRET;
|
||||||
|
if (!secretKey) throw new Error('AUTH_SECRET Umgebungsvariable ist nicht gesetzt!');
|
||||||
const key = new TextEncoder().encode(secretKey);
|
const key = new TextEncoder().encode(secretKey);
|
||||||
|
|
||||||
export async function proxy(request: NextRequest) {
|
export async function middleware(request: NextRequest) {
|
||||||
const { pathname } = request.nextUrl;
|
const { pathname } = request.nextUrl;
|
||||||
|
|
||||||
if (pathname.startsWith('/login') || pathname.startsWith('/_next') || pathname.startsWith('/favicon')) {
|
if (pathname.startsWith('/login') || pathname.startsWith('/_next') || pathname.startsWith('/favicon')) {
|
||||||
Reference in New Issue
Block a user