mirror of
https://github.com/hanzoai/analytics.git
synced 2026-10-30 15:05:29 +00:00
zeekay
04314dabdc
The route tree moves from src/app/api to src/app/v1, and every caller moves with it: the dashboard's useApi base, the tracker and recorder collect paths, the Next headers and rewrites, the container middleware, the compose healthchecks and the Cypress API tests. The /v1/analytics alias is gone; /v1 is the one prefix. The build-time telemetry post to an upstream endpoint nothing serves is deleted. v1-surface.test.ts fails if src/app/api returns or any first-party file names an /api/ path. Claude-Session: https://claude.ai/code/session_011i2AG9nwpiKUCVxAdDzYuU
81 lines
2.3 KiB
TypeScript
81 lines
2.3 KiB
TypeScript
import { type NextRequest, NextResponse } from 'next/server';
|
|
import { matchesConfiguredPath } from '@/lib/match-configured-path';
|
|
|
|
export const config = {
|
|
matcher: '/:path*',
|
|
};
|
|
|
|
const TRACKER_PATH = '/script.js';
|
|
const COLLECT_PATH = '/v1/send';
|
|
const LOGIN_PATH = '/login';
|
|
const BASE_PATH = process.env.BASE_PATH || '';
|
|
|
|
const apiHeaders = {
|
|
'Access-Control-Allow-Origin': '*',
|
|
'Access-Control-Allow-Headers': '*',
|
|
'Access-Control-Allow-Methods': 'GET, DELETE, POST, PUT',
|
|
'Access-Control-Max-Age': process.env.CORS_MAX_AGE || '86400',
|
|
'Cache-Control': 'no-cache',
|
|
};
|
|
|
|
const trackerHeaders = {
|
|
'Access-Control-Allow-Origin': '*',
|
|
'Cache-Control': 'public, max-age=86400, must-revalidate',
|
|
};
|
|
|
|
function customCollectEndpoint(request: NextRequest) {
|
|
const collectEndpoint = process.env.COLLECT_API_ENDPOINT;
|
|
|
|
if (collectEndpoint) {
|
|
const url = request.nextUrl.clone();
|
|
|
|
if (matchesConfiguredPath(url.pathname, collectEndpoint, BASE_PATH)) {
|
|
url.pathname = COLLECT_PATH;
|
|
return NextResponse.rewrite(url, { headers: apiHeaders });
|
|
}
|
|
}
|
|
}
|
|
|
|
function customScriptName(request: NextRequest) {
|
|
const scriptName = process.env.TRACKER_SCRIPT_NAME;
|
|
|
|
if (scriptName) {
|
|
const url = request.nextUrl.clone();
|
|
const names = scriptName.split(',').map(name => name.trim().replace(/^\/+/, ''));
|
|
|
|
if (names.find(name => matchesConfiguredPath(url.pathname, name, BASE_PATH))) {
|
|
url.pathname = TRACKER_PATH;
|
|
return NextResponse.rewrite(url, { headers: trackerHeaders });
|
|
}
|
|
}
|
|
}
|
|
|
|
function customScriptUrl(request: NextRequest) {
|
|
const scriptUrl = process.env.TRACKER_SCRIPT_URL;
|
|
|
|
if (scriptUrl && matchesConfiguredPath(request.nextUrl.pathname, TRACKER_PATH, BASE_PATH)) {
|
|
return NextResponse.rewrite(scriptUrl, { headers: trackerHeaders });
|
|
}
|
|
}
|
|
|
|
function disableLogin(request: NextRequest) {
|
|
const loginDisabled = process.env.DISABLE_LOGIN;
|
|
|
|
if (loginDisabled && matchesConfiguredPath(request.nextUrl.pathname, LOGIN_PATH, BASE_PATH)) {
|
|
return new NextResponse('Access denied', { status: 403 });
|
|
}
|
|
}
|
|
|
|
export default function middleware(req: NextRequest) {
|
|
const fns = [customCollectEndpoint, customScriptName, customScriptUrl, disableLogin];
|
|
|
|
for (const fn of fns) {
|
|
const res = fn(req);
|
|
if (res) {
|
|
return res;
|
|
}
|
|
}
|
|
|
|
return NextResponse.next();
|
|
}
|