middleware.ts

import type { NextRequest } from 'next/server';
import { NextResponse } from 'next/server';

import type { UserResponse } from '@/api-types';
import { CITIES, COOKIES, ROLES_BY_ROUTE, ROUTES } from '@/utils/constants';
import { getDevice } from '@/utils/helpers/server';

const UNAUTH_ROUTES = [ROUTES.APP.AUTH, ROUTES.ORG.AUTH, ROUTES.APP.ACTIVITIES];
const MOBILE_ONLY_ROUTES = [
  ROUTES.APP.AUTH,
  ROUTES.APP.PROFILE.ROOT,
  ROUTES.APP.RATING,
  ROUTES.APP.SUPPORT,
  ROUTES.APP.TAIGA
];

export const middleware = (request: NextRequest) => {
  const { pathname } = new URL(request.url);
  console.info('\nMIDDLEWARE REQUEST:', request.method, request.url, pathname, new Date());

  if (request.method !== 'GET') return NextResponse.next();

  const sessionIdCookie = request.cookies.get(COOKIES.SESSION_ID);
  const userSessionCookie = request.cookies.get(COOKIES.USER_SESSION);
  const isAuthenticated = !!sessionIdCookie && !!userSessionCookie;

  const userSession = userSessionCookie?.value
    ? (JSON.parse(userSessionCookie.value) as UserResponse)
    : undefined;

  const device = getDevice();
  const isMobile = device.type === 'mobile';

  const isUnAuthRoute = UNAUTH_ROUTES.some((route) => request.url.includes(route));
  const isMobileOnlyRoute = MOBILE_ONLY_ROUTES.some((route) => request.url.includes(route));

  console.log('@isMobileOnlyRoute', isMobileOnlyRoute);
  if (!isMobile && isMobileOnlyRoute) {
    return NextResponse.redirect(
      new URL(
        `${ROUTES.REDIRECT}?to=${request.url.includes('excursion') ? 'excursion' : 'login'}`,
        request.url
      )
    );
  }

  const isLanding =
    pathname === ROUTES.LANDING.ROOT ||
    Object.values(CITIES).some((city) => request.url.includes(city.id));

  console.log('@isAuthenticated', isAuthenticated);
  console.log('@isLanding', isLanding);
  console.log('@isUnAuthRoute', isUnAuthRoute);

  if (!isAuthenticated && (isLanding || isUnAuthRoute)) {
    console.log('@.1 !isAuthenticated unauth page');
    return NextResponse.next();
  }

  const isOrg = request.url.includes(ROUTES.ORG.ROOT);
  if (isOrg) {
    if (!isAuthenticated && !isUnAuthRoute) {
      console.log('@.2 !isAuthenticated, org page requires auth');
      return NextResponse.redirect(new URL(ROUTES.ORG.AUTH, request.url));
    }

    const isOrgRouteAvailable = !!userSession?.roles?.filter((role) =>
      ROLES_BY_ROUTE.ORG.includes(role)
    ).length;
    if (isAuthenticated && !isOrgRouteAvailable) {
      console.log('@.2 org page requires certain roles');
      return NextResponse.redirect(new URL(ROUTES.ORG.AUTH, request.url));
    }

    if (isAuthenticated && request.url.includes(ROUTES.ORG.AUTH)) {
      console.log('@.2 isAuthenticated, org auth page');
      return NextResponse.redirect(new URL(ROUTES.ORG.ORGANIZATIONS.DASHBOARD, request.url));
    }
  }

  const isApp = request.url.includes(ROUTES.APP.ROOT);
  if (isApp) {
    if (!isAuthenticated && !isUnAuthRoute) {
      console.log('@.3 !isAuthenticated, app page requires auth');
      return NextResponse.redirect(new URL(ROUTES.APP.AUTH, request.url));
    }

    const isAppRouteAvailable = !!userSession?.roles?.filter((role) =>
      ROLES_BY_ROUTE.APP.includes(role)
    ).length;
    if (isAuthenticated && !isAppRouteAvailable) {
      console.log('@.3 app page requires certain roles');
      return NextResponse.redirect(new URL(ROUTES.APP.AUTH, request.url));
    }

    if (isAuthenticated && request.url.includes(ROUTES.APP.AUTH)) {
      console.log('@.2 isAuthenticated, app auth page');
      return NextResponse.redirect(new URL(ROUTES.APP.PROFILE.ROOT, request.url));
    }
  }

  const isPartner = request.url.includes(ROUTES.PARTNER.ROOT);
  if (isPartner) {
    if (!isAuthenticated && !isUnAuthRoute) {
      console.log('@.4 !isAuthenticated, partner page requires auth');
      return NextResponse.redirect(new URL(ROUTES.ORG.AUTH, request.url));
    }

    const isPartnerRouteAvailable = !!userSession?.roles?.filter((role) =>
      ROLES_BY_ROUTE.PARTNER.includes(role)
    ).length;
    if (isAuthenticated && !isPartnerRouteAvailable) {
      console.log('@.4 partner page requires certain roles');
      return NextResponse.redirect(new URL(ROUTES.ORG.AUTH, request.url));
    }
  }

  return NextResponse.next();
};

export const config = {
  matcher: '/((?!api|static|.*\\..*|_next).*)'
};