49 lines
1.2 KiB
TypeScript
49 lines
1.2 KiB
TypeScript
import { NextRequest, NextResponse } from 'next/server';
|
|
import createMiddleware from 'next-intl/middleware';
|
|
import { locales, defaultLocale } from './i18n/config';
|
|
import { randomBytes } from 'crypto';
|
|
|
|
const CSRF_TOKEN_COOKIE_NAME = 'csrf_token';
|
|
const CSRF_TOKEN_LENGTH = 32;
|
|
|
|
const intlMiddleware = createMiddleware({
|
|
locales,
|
|
defaultLocale,
|
|
localePrefix: 'always',
|
|
});
|
|
|
|
export default function middleware(request: NextRequest) {
|
|
// Run the i18n middleware first
|
|
const response = intlMiddleware(request);
|
|
|
|
// Check if CSRF token exists in cookies
|
|
const existingToken = request.cookies.get(CSRF_TOKEN_COOKIE_NAME);
|
|
|
|
// Generate and set CSRF token if it doesn't exist
|
|
if (!existingToken) {
|
|
const newToken = randomBytes(CSRF_TOKEN_LENGTH).toString('base64url');
|
|
|
|
// Create a new response or clone the existing one
|
|
const finalResponse = response || NextResponse.next();
|
|
|
|
finalResponse.cookies.set(CSRF_TOKEN_COOKIE_NAME, newToken, {
|
|
httpOnly: true,
|
|
secure: process.env.NODE_ENV === 'production',
|
|
sameSite: 'strict',
|
|
maxAge: 60 * 60 * 24, // 24 hours
|
|
path: '/',
|
|
});
|
|
|
|
return finalResponse;
|
|
}
|
|
|
|
return response;
|
|
}
|
|
|
|
export const config = {
|
|
matcher: [
|
|
'/',
|
|
'/(de|en|sr)/:path*',
|
|
],
|
|
};
|