middleware.js

import { NextResponse } from 'next/server';
import { get_cookie } from "@/scripts/context";

const redirect = ( url, request ) => NextResponse.redirect(new URL(url, request.url));
const check_permission = ( permissions, ...perms ) => perms.every(p => p ? permissions?.includes(p) : true);

const routes = [
    ['category', 'view_categories'],
    ['product', 'view_products'],
    ['coupon', 'view_coupons'],
    ['order', 'view_orders'],
    ['review', 'view_reviews'],
    ['blog', 'view_blogs'],
    ['comment', 'view_comments'],
    ['reply', 'view_replies'],
    ['complaint', 'view_complaints'],
    ['report', 'view_reports'],
    ['chatbox', 'allow_chats'],
    ['mailbox', 'allow_mails'],
    ['client', 'view_clients'],
    ['vendor', 'view_vendors'],
    ['content', 'view_contents'],
    ['setting', 'view_settings'],
    ['payment', 'view_payments'],
    ['admin', 'supervisor'],
];
const check_auth = ( request, path, user ) => {

    if ( !user && path !== '/auth/login' ) return redirect('/auth/login', request);
    else if ( user && !user.logged && path !== '/auth/unlock' ) return redirect('/auth/unlock', request);
    else if ( user && user.logged && path.includes('/auth') ) return redirect('/', request);

}
const check_role = ( request, path, permissions ) => {

    if ( path.includes('/home') || path.includes('/dashboard') ) return redirect('/', request);

    for ( const [keyword, perms] of routes ) {

        if ( path.includes(`/${keyword}`) && !check_permission(permissions, ...(Array.isArray(perms) ? perms : [perms])) ) {

            return redirect('/', request);

        }

    }

}

export const config = {
    matcher: [
        '/((?!api|_next/static|_next/image|favicon.ico).*)',
    ],
}
export const middleware = async( request ) => {

    const path = request.nextUrl.pathname;
    const user = get_cookie('user', request);
    const permissions = get_cookie('permissions', request);

    if ( /\.(.*)$/.test(path) ) return NextResponse.next();

    const auth_denied = check_auth( request, path, user );
    if ( auth_denied ) return auth_denied;

    // const role_denied = check_role( request, path, permissions );
    // if ( role_denied ) return role_denied;

    return NextResponse.next();

}