43 lines
No EOL
1.4 KiB
JavaScript
43 lines
No EOL
1.4 KiB
JavaScript
export default defineEventHandler(async (event) => {
|
|
// Skip auth check for login page and auth API routes
|
|
if (event.node.req.url?.startsWith('/api/auth/') ||
|
|
event.node.req.url === '/login' ||
|
|
event.node.req.url?.startsWith('/_nuxt/') ||
|
|
event.node.req.url?.startsWith('/__nuxt_devtools__/')) {
|
|
return
|
|
}
|
|
|
|
// Only check auth for API routes and page requests
|
|
if (event.node.req.url?.startsWith('/api/') ||
|
|
!event.node.req.url?.includes('.')) {
|
|
|
|
const token = getCookie(event, 'auth-token')
|
|
|
|
if (!token) {
|
|
if (event.node.req.url?.startsWith('/api/')) {
|
|
throw createError({
|
|
statusCode: 401,
|
|
statusMessage: 'Authentication required'
|
|
})
|
|
}
|
|
// Redirect to login for page requests
|
|
return sendRedirect(event, '/login')
|
|
}
|
|
|
|
const session = await useStorage('memory').getItem(`session:${token}`)
|
|
|
|
if (!session || (session.expiresAt && new Date() > new Date(session.expiresAt))) {
|
|
if (session && session.expiresAt && new Date() > new Date(session.expiresAt)) {
|
|
await useStorage('memory').removeItem(`session:${token}`)
|
|
}
|
|
deleteCookie(event, 'auth-token')
|
|
if (event.node.req.url?.startsWith('/api/')) {
|
|
throw createError({
|
|
statusCode: 401,
|
|
statusMessage: 'Session expired'
|
|
})
|
|
}
|
|
return sendRedirect(event, '/login')
|
|
}
|
|
}
|
|
}) |