feat(WEB-132): add middlewares, support for seamless login and improve lang based routes

middlewares/webView.ts

@@ -0,0 +1,59 @@
+import { NextResponse, type NextMiddleware } from "next/server"
+
+import { findLang } from "@/constants/languages"
+import { env } from "@/env/server"
+import { badRequest, internalServerError } from "@/server/errors/next"
+import { decryptData } from "@/utils/aes"
+
+import type { MiddlewareMatcher } from "@/types/middleware"
+
+export const middleware: NextMiddleware = async (request) => {
+  const webviewToken = request.cookies.get("webviewToken")
+  if (webviewToken) {
+    // since the token exists, this is a subsequent visit
+    // we're done, allow it
+    return NextResponse.next()
+  }
+
+  // Authorization header is required for webviews
+  // It should be base64 encoded
+  const authorization = request.headers.get("Authorization")!
+  if (!authorization) {
+    return badRequest()
+  }
+
+  // Initialization vector header is required for webviews
+  // It should be base64 encoded
+  const initializationVector = request.headers.get("X-AES-IV")!
+  if (!initializationVector) {
+    return badRequest()
+  }
+
+  try {
+    const decryptedData = await decryptData(
+      env.WEBVIEW_ENCRYPTION_KEY,
+      initializationVector,
+      authorization
+    )
+
+    // Pass the webview token via cookie to the page
+    return NextResponse.next({
+      headers: {
+        "Set-Cookie": `webviewToken=${decryptedData}; Secure; HttpOnly;`,
+      },
+    })
+  } catch (e) {
+    if (e instanceof Error) {
+      console.error(`${e.name}: ${e.message}`)
+    }
+
+    return badRequest()
+  }
+}
+
+export const matcher: MiddlewareMatcher = (request) => {
+  const { nextUrl } = request
+  const lang = findLang(nextUrl.pathname)
+  const pathNameWithoutLang = nextUrl.pathname.replace(`/${lang}`, "")
+  return pathNameWithoutLang.startsWith("/webview/")
+}