diff --git a/middleware.ts b/middleware.ts index d98648a..1410a7c 100644 --- a/middleware.ts +++ b/middleware.ts @@ -2,15 +2,10 @@ import { NextResponse, type NextRequest } from 'next/server'; import { isCsrfProtectedRequest, isTrustedRequestOrigin } from '@/lib/csrf'; export function middleware(request: NextRequest) { - console.log('[middleware] path:', request.nextUrl.pathname, 'method:', request.method, 'origin:', request.headers.get('origin')); - const csrfProtected = isCsrfProtectedRequest(request); - const trusted = isTrustedRequestOrigin(request); - console.log('[middleware] csrfProtected:', csrfProtected, 'trusted:', trusted); - if (csrfProtected && !trusted) { - console.log('[middleware] BLOCKING request'); + if (isCsrfProtectedRequest(request) && !isTrustedRequestOrigin(request)) { return NextResponse.json({ error: 'Invalid request origin' }, { status: 403 }); } - console.log('[middleware] ALLOWING request'); + return NextResponse.next(); } diff --git a/next.config.ts b/next.config.ts index f3f674c..9ae23a8 100755 --- a/next.config.ts +++ b/next.config.ts @@ -2,9 +2,7 @@ import type { NextConfig } from "next"; const nextConfig: NextConfig = { output: "standalone", - turbopack: { - root: "/Users/fatmacetin/dyad-apps/exametra", - }, + /* config options here */ typescript: { ignoreBuildErrors: true, },