Update 2 files
This commit is contained in:
1 parent
a3e56f1ba6
commit
59fcecedee
2 files changed
+3
-10
No files matched your search
+2
-7
@@ -2,15 +2,10 @@ import { NextResponse, type NextRequest } from 'next/server';
|
|||||||
import { isCsrfProtectedRequest, isTrustedRequestOrigin } from '@/lib/csrf';
|
import { isCsrfProtectedRequest, isTrustedRequestOrigin } from '@/lib/csrf';
|
||||||
|
|
||||||
export function middleware(request: NextRequest) {
|
export function middleware(request: NextRequest) {
|
||||||
console.log('[middleware] path:', request.nextUrl.pathname, 'method:', request.method, 'origin:', request.headers.get('origin'));
|
if (isCsrfProtectedRequest(request) && !isTrustedRequestOrigin(request)) {
|
||||||
const csrfProtected = isCsrfProtectedRequest(request);
|
|
||||||
const trusted = isTrustedRequestOrigin(request);
|
|
||||||
console.log('[middleware] csrfProtected:', csrfProtected, 'trusted:', trusted);
|
|
||||||
if (csrfProtected && !trusted) {
|
|
||||||
console.log('[middleware] BLOCKING request');
|
|
||||||
return NextResponse.json({ error: 'Invalid request origin' }, { status: 403 });
|
return NextResponse.json({ error: 'Invalid request origin' }, { status: 403 });
|
||||||
}
|
}
|
||||||
console.log('[middleware] ALLOWING request');
|
|
||||||
return NextResponse.next();
|
return NextResponse.next();
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
+1
-3
@@ -2,9 +2,7 @@ import type { NextConfig } from "next";
|
|||||||
|
|
||||||
const nextConfig: NextConfig = {
|
const nextConfig: NextConfig = {
|
||||||
output: "standalone",
|
output: "standalone",
|
||||||
turbopack: {
|
/* config options here */
|
||||||
root: "/Users/fatmacetin/dyad-apps/exametra",
|
|
||||||
},
|
|
||||||
typescript: {
|
typescript: {
|
||||||
ignoreBuildErrors: true,
|
ignoreBuildErrors: true,
|
||||||
},
|
},
|
||||||
|
|||||||
Reference in new issue
Block a user