126 lines
3.7 KiB
TypeScript
126 lines
3.7 KiB
TypeScript
/**
|
|
* 📄 Proxy Route
|
|
* API 프록시 라우트
|
|
*
|
|
* - 서버 API로의 요청 프록시 처리
|
|
* - 쿠키 기반 인증 토큰 및 리프레시 토큰 관리
|
|
* - POST 및 PUT 요청 핸들링
|
|
* - 사용자 인증 정보 검증 및 응답 처리
|
|
* - 에러 핸들링 및 상태 코드 반환
|
|
* - 사이트 ID 및 헤더 설정
|
|
*/
|
|
import { cookies } from "next/headers";
|
|
import { NextResponse } from "next/server";
|
|
|
|
const ACCESS_TOKEN = process.env.NEXT_PUBLIC_ACCESS_TOKEN || "access-token";
|
|
const AUTH_USER_ID = process.env.NEXT_PUBLIC_AUTH_USER_ID || "token-id";
|
|
const CLAIM_NAME = process.env.NEXT_PUBLIC_CLAIM_NAME || "Authorization";
|
|
const COOKIE_DOMAIN = process.env.NEXT_PUBLIC_COOKIE_DOMAIN;
|
|
const REFRESH_TOKEN = process.env.NEXT_PUBLIC_REFRESH_TOKEN || "refresh-token";
|
|
const SERVER_API_URL = process.env.NEXT_PUBLIC_SERVER_API_URL || "";
|
|
const SITE_ID = process.env.NEXT_PUBLIC_SITE_ID || "WR";
|
|
|
|
async function handler(
|
|
request: Request,
|
|
params: { url: string[] },
|
|
method: "GET" | "POST" | "PUT" | "DELETE",
|
|
) {
|
|
const cookieStore = await cookies();
|
|
const headers: Record<string, string> = {
|
|
"Content-Type": "application/json",
|
|
"X-Site-Id": SITE_ID,
|
|
};
|
|
let body = {};
|
|
const isRefreshHandler = params.url.includes("refresh");
|
|
|
|
// silent refresh
|
|
if (isRefreshHandler) {
|
|
const refreshToken = cookieStore.get(REFRESH_TOKEN); // "refresh-token"
|
|
console.log("refreshToken", refreshToken?.value);
|
|
headers[CLAIM_NAME] = refreshToken?.value ?? ""; // "Authorization"
|
|
|
|
if (!headers[CLAIM_NAME]) { // "Authorization"
|
|
return NextResponse.json({ message: "Can't refresh" }, { status: 401 });
|
|
}
|
|
}
|
|
|
|
try {
|
|
if (!isRefreshHandler) {
|
|
body = await request.json();
|
|
}
|
|
|
|
const result = await fetch(`${SERVER_API_URL}/${params.url.join("/")}`, {
|
|
method,
|
|
headers,
|
|
body: JSON.stringify(body),
|
|
});
|
|
// console.log(result);
|
|
if (!result.ok) {
|
|
return NextResponse.json(
|
|
{ message: "first Invalid Credentials" },
|
|
{ status: result.status },
|
|
);
|
|
}
|
|
|
|
const accessToken = result.headers.get(ACCESS_TOKEN); // "access-token"
|
|
const refreshToken = result.headers.get(REFRESH_TOKEN); // "refresh-token" 신규 받아온 token
|
|
const userId = result.headers.get(AUTH_USER_ID); // "token-id"
|
|
|
|
if (accessToken && userId) {
|
|
const response = NextResponse.json({
|
|
[ACCESS_TOKEN]: accessToken,
|
|
[AUTH_USER_ID]: userId,
|
|
});
|
|
|
|
if (refreshToken) {
|
|
response.cookies.set(REFRESH_TOKEN, refreshToken, {
|
|
httpOnly: true,
|
|
sameSite: "lax", // 다른 사이트에서 들어오는 모든 요청에 대해 쿠키를 보내지 않는 가장 강력한 설정
|
|
domain: getCookieDomain(),
|
|
path: "/",
|
|
});
|
|
console.log("refresh cookie setting : " + refreshToken);
|
|
}
|
|
|
|
return response;
|
|
}
|
|
|
|
return NextResponse.json(
|
|
{ message: "Invalid Credentials" },
|
|
{ status: 401 },
|
|
);
|
|
} catch (error) {
|
|
return NextResponse.json(
|
|
{ message: "Server Error", error },
|
|
{ status: 500 },
|
|
);
|
|
}
|
|
}
|
|
|
|
export async function POST(
|
|
request: Request,
|
|
props: { params: Promise<{ url: string[] }> },
|
|
) {
|
|
const params = await props.params;
|
|
return handler(request, params, "POST");
|
|
}
|
|
|
|
export async function PUT(
|
|
request: Request,
|
|
props: { params: Promise<{ url: string[] }> },
|
|
) {
|
|
const params = await props.params;
|
|
return handler(request, params, "PUT");
|
|
}
|
|
|
|
function getCookieDomain(): string | undefined {
|
|
if (typeof window === "undefined") return undefined;
|
|
|
|
if (COOKIE_DOMAIN) return COOKIE_DOMAIN;
|
|
|
|
const { hostname } = window.location;
|
|
if (hostname === "localhost" || hostname === "127.0.0.1") return undefined;
|
|
|
|
return hostname;
|
|
}
|