Below is my implementation, I just keep getting sent to a 404 page.
This seems to be how the router function is handling the auth middleware.

import { withAuth } from '@kinde-oss/kinde-auth-nextjs/server';
import { type NoseconeOptions, defaults, createMiddleware as noseconeMiddleware } from '@nosecone/next';
import createIntlMiddleware from 'next-intl/middleware';
import type { NextFetchEvent, NextMiddleware, NextRequest, NextResponse } from 'next/server';
import { match } from 'path-to-regexp';
import { routing } from './i18n/routing';

// Next.js middleware config

export const config = { matcher: ['/((?!api|_next|.*\\..*).*)'] };

// Nosecone security headers configuration
// https://docs.arcjet.com/nosecone/quick-start
const noseconeOptions: NoseconeOptions = {
	...defaults,
};

const securityHeaders = noseconeMiddleware(noseconeOptions);
const authMiddleware = async (request: NextRequest) => withAuth(request, { isReturnToCurrentPage: true });
const intlMiddleware = createIntlMiddleware(routing);

// Add any paths you want to run different middleware for. They use
// path-to-regexp which is the same as the Next.js config. You can provide a
// single middleware or an array of middlewares.
export default router({
	// Run nosecone middleware on any path
	'/{*path}': [securityHeaders, authMiddleware, intlMiddleware],
});

// Simplified version of nemo. This could be extracted into a utility library
function router(pathMiddlewareMap: Record<string, NextMiddleware | NextMiddleware[]>): NextMiddleware {
	const middleware = Object.entries(pathMiddlewareMap).map(([path, middleware]) => {
		if (Array.isArray(middleware)) {
			return [match(path), middleware] as const;
		}
		return [match(path), [middleware]] as const;
	});

	return async (request: NextRequest, event: NextFetchEvent): Promise<NextResponse | Response> => {
		const path = request.nextUrl.pathname || '/';
		const addedHeaders = new Headers();

		for (const [matchFunc, middlewareFuncs] of middleware) {
			const m = matchFunc(path);
			if (m) {
				for (const fn of middlewareFuncs) {
					const resp = await fn(request, event);
					// TODO: better response guards
					if (typeof resp !== 'undefined' && resp !== null) {
						resp.headers.forEach((value, key) => {
							addedHeaders.set(key, value);
						});
					}
				}
			}
		}

		addedHeaders.set('x-middleware-next', '1');

		return new Response(null, {
			headers: addedHeaders,
		});
	};
}

This is my current implementation with Nemo that works but excluding the securityHeaders

import { withAuth } from '@kinde-oss/kinde-auth-nextjs/middleware';
// import { type NoseconeOptions, defaults, createMiddleware as securityHeaders } from '@nosecone/next';
import { type MiddlewareFunction, type MiddlewareFunctionProps, createMiddleware } from '@rescale/nemo';
import createIntlMiddleware from 'next-intl/middleware';
import { routing } from './i18n/routing';

const intlMiddleware = createIntlMiddleware(routing);

// const noseconeOptions: NoseconeOptions = {
// 	...defaults,
// };

// const before: MiddlewareFunction[] = [securityHeaders(noseconeOptions)];

const after: MiddlewareFunction[] = [
	async ({ request }: MiddlewareFunctionProps) => {
		return withAuth(request, { isReturnToCurrentPage: true });
	},
	async ({ request }: MiddlewareFunctionProps) => {
		return intlMiddleware(request);
	},
];

export const middleware = createMiddleware({}, { after });

export const config = { matcher: ['/((?!api|_next|.*\\..*).*)'] };

Combine createMiddleware with additional auth middleware #2639

Description

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions