move auth check to middleware

src/middleware/index.ts

@@ -0,0 +1,50 @@
+import { defineMiddleware } from "astro:middleware";
+import { supabase } from "../scripts/supabase";
+import { cookieOptions } from "../scripts/utils";
+
+const protectedRoutes = ["/dashboard"];
+const redirectRoutes = ["/signin", "/register"];
+
+export const onRequest = defineMiddleware(
+  async ({ locals, url, cookies, redirect }, next) => {
+    if (protectedRoutes.includes(url.pathname)) {
+      const accessToken = cookies.get("sb-access-token");
+      const refreshToken = cookies.get("sb-refresh-token");
+
+      if (!accessToken || !refreshToken) {
+        return redirect("/signin");
+      }
+
+      const { data, error } = await supabase.auth.setSession({
+        refresh_token: refreshToken.value,
+        access_token: accessToken.value,
+      });
+
+      if (error) {
+        return redirect("/signin");
+      }
+
+      locals.email = data.user?.email!;
+      cookies.set(
+        "sb-access-token",
+        data?.session?.access_token!,
+        cookieOptions,
+      );
+      cookies.set(
+        "sb-refresh-token",
+        data?.session?.refresh_token!,
+        cookieOptions,
+      );
+    }
+
+    if (redirectRoutes.includes(url.pathname)) {
+      const accessToken = cookies.get("sb-access-token");
+      const refreshToken = cookies.get("sb-refresh-token");
+
+      if (accessToken && refreshToken) {
+        return redirect("/dashboard");
+      }
+    }
+    return next();
+  },
+);

src/pages/dashboard.astro

@@ -1,36 +1,9 @@
 ---
 import Base from "../layout/Base.astro";
-import { supabase } from "../scripts/supabase";
-
-const accessToken = Astro.cookies.get("sb-access-token");
-const refreshToken = Astro.cookies.get("sb-refresh-token");
-
-if (!accessToken || !refreshToken) {
-  return Astro.redirect("/signin");
-}
-
-const { data, error } = await supabase.auth.setSession({
-  refresh_token: refreshToken.value,
-  access_token: accessToken.value,
-});
-
-if (error || !data.user?.email) {
-  return Astro.redirect("/signin");
-}
-
-Astro.cookies.set("sb-access-token", data?.session?.access_token!, {
-  path: "/",
-  secure: true,
-  httpOnly: true,
-});
-Astro.cookies.set("sb-refresh-token", data?.session?.refresh_token!, {
-  path: "/",
-  secure: true,
-  httpOnly: true,
-});
+const {email} = Astro.locals;
 ---
 
 <Base title="Dashboard">
-  <p>Hi {data.user.email}</p>
+  <p>Hi {email}</p>
   <a href="/api/auth/signout">Sign out</a>
 </Base>

src/pages/register.astro

@@ -1,12 +1,5 @@
 ---
 import Base from "../layout/Base.astro";
-
-const accessToken = Astro.cookies.get("sb-access-token");
-const refreshToken = Astro.cookies.get("sb-refresh-token");
-
-if (accessToken && refreshToken) {
-	return Astro.redirect("/dashboard");
-}
 ---
 
 <Base title="Register">

src/pages/signin.astro

@@ -1,12 +1,5 @@
 ---
 import Base from "../layout/Base.astro";
-
-const accessToken = Astro.cookies.get("sb-access-token");
-const refreshToken = Astro.cookies.get("sb-refresh-token");
-
-if (accessToken && refreshToken) {
-	return Astro.redirect("/dashboard");
-}
 ---
 
 <Base title="Sign in">