Initial deployment setup

apps/web/src/proxy.ts

@@ -0,0 +1,85 @@
+/**
+ * Copyright 2025 LY Corporation
+ *
+ * LY Corporation licenses this file to you under the Apache License,
+ * version 2.0 (the "License"); you may not use this file except in compliance
+ * with the License. You may obtain a copy of the License at:
+ *
+ *   https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+ * License for the specific language governing permissions and limitations
+ * under the License.
+ */
+import { NextResponse } from 'next/server';
+import type { NextRequest } from 'next/server';
+import i18nConfig from 'next-i18next.config';
+
+import { Path } from '@/shared/constants';
+
+export function proxy(req: NextRequest) {
+  if (Path.isErrorPage(req.nextUrl.pathname)) return NextResponse.next();
+
+  // Swagger is proxied by next.config.js to the private Nest API service.
+  // It must bypass the authenticated-page redirect below so that the public
+  // documentation URL is not sent to /main when a jwt cookie is present.
+  const isSwaggerRoute =
+    req.nextUrl.pathname === '/docs' ||
+    req.nextUrl.pathname.startsWith('/docs/') ||
+    req.nextUrl.pathname === '/docs-json' ||
+    req.nextUrl.pathname === '/admin-docs' ||
+    req.nextUrl.pathname.startsWith('/admin-docs/') ||
+    req.nextUrl.pathname === '/admin-docs-json' ||
+    req.nextUrl.pathname === '/secretary-docs' ||
+    req.nextUrl.pathname.startsWith('/secretary-docs/') ||
+    req.nextUrl.pathname === '/secretary-docs-json';
+  if (isSwaggerRoute) return NextResponse.next();
+
+  const jwt = req.cookies.get('jwt')?.value;
+  const isProtected = Path.isProtectPage(req.nextUrl.pathname);
+  const isAuthRoute = req.nextUrl.pathname.startsWith('/auth');
+  const isDemoPage = req.nextUrl.pathname.startsWith('/demo');
+  const isSupportWorkflowPage =
+    req.nextUrl.pathname.startsWith('/support') ||
+    req.nextUrl.pathname === '/fixed-ip-request' ||
+    req.nextUrl.pathname === '/ops' ||
+    req.nextUrl.pathname.startsWith('/admin/issues');
+
+  if (jwt && !isProtected && !isDemoPage && !isSupportWorkflowPage && !isAuthRoute) {
+    return NextResponse.redirect(new URL(Path.MAIN, req.url));
+  }
+
+  if (!jwt && isProtected) {
+    const parmas = new URLSearchParams(req.nextUrl.search);
+    if (parmas.get('callback_url')) {
+      return NextResponse.redirect(
+        new URL(
+          Path.SIGN_IN + '?callback_url=' + parmas.get('callback_url'),
+          req.url,
+        ),
+      );
+    } else {
+      const requestPath = `${req.nextUrl.pathname}${encodeURIComponent(
+        req.nextUrl.search,
+      )}`;
+      return NextResponse.redirect(
+        new URL(Path.SIGN_IN + '?callback_url=' + requestPath, req.url),
+      );
+    }
+  }
+
+  if (req.nextUrl.locale === 'default') {
+    const requestPath = `${req.nextUrl.pathname}${req.nextUrl.search}`;
+    const locale =
+      req.cookies.get('NEXT_LOCALE')?.value ?? i18nConfig.i18n.defaultLocale;
+    return NextResponse.redirect(new URL(`/${locale}${requestPath}`, req.url));
+  }
+
+  return NextResponse.next();
+}
+
+export const config = {
+  matcher: '/((?!api|_next/static|_next/image|favicon.ico|fonts|assets).*)',
+};