middleware.js

import { NextResponse } from 'next/server';
import { verifyJWT } from './lib/utils/server';
import CryptoJS from 'crypto-js';

export async function middleware(request) {
  const path = request.nextUrl.pathname;

  const access_key =
    request.cookies.get(process.env.NEXT_PUBLIC_PREFIX_KEY + '-token')?.value ||
    undefined;

  if (path.startsWith('/admin') && !access_key) {
    return NextResponse.redirect(new URL('/', request.nextUrl));
  } else if (path.startsWith('/admin') && access_key) {
    try {
      const token = CryptoJS.AES.decrypt(
        access_key,
        process.env.CRYPTO_SECRET
      ).toString(CryptoJS.enc.Utf8);

      await verifyJWT(token);
    } catch (error) {
      console.log(error);
      return NextResponse.redirect(new URL('/invalid-auth', request.nextUrl));
    }
  }

  if (path == '/' && access_key) {
    return NextResponse.redirect(new URL('/admin/dashboard', request.nextUrl));
  }
}

export const config = {
  matcher: ['/', '/:path*'],
};