Update 2 files

This commit is contained in:
[dyad] committed 2026-08-03 11:16:50 +02:00
1 parent a3e56f1ba6
commit 59fcecedee
2 files changed
+3 -10

No files matched your search

+2 -7
View File
@@ -2,15 +2,10 @@ import { NextResponse, type NextRequest } from 'next/server';
import { isCsrfProtectedRequest, isTrustedRequestOrigin } from '@/lib/csrf';
export function middleware(request: NextRequest) {
console.log('[middleware] path:', request.nextUrl.pathname, 'method:', request.method, 'origin:', request.headers.get('origin'));
const csrfProtected = isCsrfProtectedRequest(request);
const trusted = isTrustedRequestOrigin(request);
console.log('[middleware] csrfProtected:', csrfProtected, 'trusted:', trusted);
if (csrfProtected && !trusted) {
console.log('[middleware] BLOCKING request');
if (isCsrfProtectedRequest(request) && !isTrustedRequestOrigin(request)) {
return NextResponse.json({ error: 'Invalid request origin' }, { status: 403 });
}
console.log('[middleware] ALLOWING request');
return NextResponse.next();
}