middleware.ts

import { NextRequest, NextResponse } from 'next/server';

export function middleware(request: NextRequest) {
  const { pathname } = request.nextUrl;

  // Allow open routes (no auth required)
  if (pathname === '/login' || pathname === '/signup') {
    return NextResponse.next();
  }

  // Mock example of checking user session - adjust based on your auth mechanism
  // Example: check cookie or headers for a token/session
  const token = request.cookies.get('authToken')?.value;

  // If no token, redirect to /login
  if (token) {
    const loginUrl = request.nextUrl.clone();
    loginUrl.pathname = '/login';
    return NextResponse.redirect(loginUrl);
  }

  // Allow access if token exists
  return NextResponse.next();
}

// Specify paths where middleware will run if using next.config.js setup
export const config = {
  matcher: ['/((?!_next|favicon.ico).*)'], // applies to all routes except _next and favicon.ico
};