Refactor nextjs middleware to use withAuth

[rlawrence89]

The following is my current middleware file used in NextJs. After reading the docs for Next-Auth I see that "withAuth" can be used. I have looked around for examples but no luck and the docs example just isn't enough for me to grasp the withAuth concepts.

Is it possible to rewrite my current code using withauth?

import { NextApiRequest } from 'next'
import { getToken } from 'next-auth/jwt'
import { getSession } from 'next-auth/react'
import { NextResponse, NextRequest } from 'next/server'
import jwt from 'jsonwebtoken'
interface JwtPayload {
  group: string
}
//Group access pages.

/**
 * ['-'] sting arrays are used because an empty sting value is read as null when performing
 * the check to see if a requested page is part of the allowed list.
 */
const CRU_PAGES: string[] = ['-']
const FORENSIC_PAGES: string[] = ['-']
const EVSPEVIALIST_PAGES: string[] = ['-']
const PREVIEW_PAGES: string[] = ['-']
const DANY_PAGES: string[] = ['-']
const DEV_PAGES: string[] = ['-', 'cases']
const TEST_PAGES: string[] = ['-']
//Default Access Routes
const DEFAULT_PAGES: string[] = [
  '/',
  'unauthorized',
  'api',
  'favicon.ico',
  'login',
  'graphql',
]

//The following function will protect the routes or redirect to unauthorized if not allowed to access a page.
function checkAuthPath(pathname: string, group: string, req: NextApiRequest) {
  var authorizedPages: string[] = ['']
  //Based on group assign authorized pages to the authorizedPages array.
  switch (group) {
    case 'CRU':
      authorizedPages = CRU_PAGES
      break
    case 'Forensic':
      authorizedPages = FORENSIC_PAGES
      break
    case 'Evidence Specialist':
      authorizedPages = EVSPEVIALIST_PAGES
      break
    case 'Preview':
      authorizedPages = PREVIEW_PAGES
      break
    case 'Dany':
      authorizedPages = DANY_PAGES
      break
    case 'DEVELOPMENT':
      authorizedPages = DEV_PAGES
      break
    default:
      authorizedPages = TEST_PAGES
  }
  authorizedPages = authorizedPages.concat(DEFAULT_PAGES)

  //Determine if request path is in the authorized paths Array. If not redirect to unauthorized.
  // if (authorizedPages.includes('/' + pathname.split('/')[3])) {
  //   return NextResponse.next()
  // }
  if (
    authorizedPages.find((element) => {
      let page = pathname.split('/')[3]
      if (page.length < 1) {
        page = '/'
      }
      if (page.includes(element)) {
        return true
      }
      return false
    })
  ) {
    return NextResponse.next()
  } else {
    console.warn('Unauthorized')
    if (pathname.split('/')[3].includes('unauthorized')) {
      return 1
    }
    return NextResponse.redirect(new URL('/unauthorized', req.url))
  }
}

export async function middleware(req: NextApiRequest) {
  const jwt_secret = process.env.JWT_SECRET as jwt.Secret
  var token = null
  const jwtToken = await getToken({
    req: req,
    secret: process.env.JWT_SECRET,
    raw: true,
  })
  if (jwtToken) {
    token = jwt.verify(jwtToken, jwt_secret, {
      algorithms: ['HS512'],
    }) as JwtPayload
  }

  const pathname = req.url
  //console.log(`Pathname: ${pathname}`)
  if (typeof pathname === 'string') {
    if (pathname.includes('login&error')) {
      return NextResponse.rewrite(pathname)
    }
    // Allows Error URL Parameters through
    if (pathname.includes('error')) {
      return NextResponse.rewrite(pathname)
    }

    if (pathname.includes('/api/auth') || token) {
      if (token) {
        const group = token.group as string
        return checkAuthPath(pathname, group, req)
      } else return NextResponse.next()
    }
    if (
      (!token && pathname !== `${process.env.NEXT_URL}/login`) ||
      pathname.includes('/api/auth')
    ) {
      return NextResponse.redirect(new URL('/login', req.url))
    }
  } else {
    throw new Error('Pathname Undefined')
  }
}

[snax4a]

I also would like to know how we can use next-auths middleware after next.js 12.2 middleware updates