first commit

proxy.ts

@@ -0,0 +1,71 @@
+import { NextRequest, NextResponse } from 'next/server'
+import type { JWT } from 'next-auth/jwt'
+import { getToken } from 'next-auth/jwt'
+import {
+  applySessionCookie,
+  encodeSessionJwt,
+  fetchRefreshedBackendJwt,
+  shouldRefreshBackendToken,
+} from '@/lib/backend-jwt-refresh'
+
+const PUBLIC_PATHS = ['/auth/login', '/auth/register']
+
+const secret = process.env.NEXTAUTH_SECRET ?? process.env.AUTH_SECRET
+
+export async function proxy(request: NextRequest) {
+  const { pathname } = request.nextUrl
+  const isPublic = PUBLIC_PATHS.some((p) => pathname.startsWith(p))
+
+  let token = (await getToken({
+    req: request,
+    secret,
+  })) as JWT | null
+
+  let refreshedJwt: string | null = null
+
+  if (token && shouldRefreshBackendToken(token)) {
+    const next = await fetchRefreshedBackendJwt(token)
+    if (next) {
+      refreshedJwt = await encodeSessionJwt(next)
+      token = next as JWT
+    }
+  }
+
+  const hasBackendAccessToken =
+    typeof token?.accessToken === 'string' && token.accessToken.length > 0
+  const isLoggedIn = !!token && hasBackendAccessToken
+
+  const withCookie = (res: NextResponse) => {
+    if (refreshedJwt) applySessionCookie(res.cookies, refreshedJwt)
+    return res
+  }
+
+  // Giriş yapmış kullanıcı auth sayfasına gitmesin
+  if (isPublic && isLoggedIn) {
+    return withCookie(NextResponse.redirect(new URL('/admin/users', request.url)))
+  }
+
+  // Herkese açık sayfalara izin ver
+  if (isPublic) {
+    return withCookie(NextResponse.next())
+  }
+
+  // Token varsa devam et
+  if (isLoggedIn) {
+    return withCookie(NextResponse.next())
+  }
+
+  // Oturum yok → login
+  const loginUrl = new URL('/auth/login', request.url)
+  loginUrl.searchParams.set('from', pathname)
+  return withCookie(NextResponse.redirect(loginUrl))
+}
+
+export const config = {
+  matcher: [
+    /*
+     * Auth sayfaları, static dosyalar ve API route'ları hariç her şeyi yakala
+     */
+    '/((?!_next/static|_next/image|favicon.ico|api/).*)',
+  ],
+}