tknuth/stadtwerke
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

GSC

Browse Source
This commit is contained in:
Timo Knuth
2026-04-29 23:52:19 +02:00
parent 2b14c778b7
commit 00bff3bcf7
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
innungsapp/apps/admin/middleware.ts
View File

@@ -79,7 +79,7 @@ export function middleware(request: NextRequest) {
// because they are shared across the entire app // because they are shared across the entire app
const isSharedPath = TENANT_SHARED_PATHS.some((p) => pathname.startsWith(p)) || const isSharedPath = TENANT_SHARED_PATHS.some((p) => pathname.startsWith(p)) ||
pathname.startsWith('/_next') || pathname.startsWith('/_next') ||
/\.(png|jpg|jpeg|gif|svg|webp|ico|txt|xml)$/i.test(pathname) /\.(png|jpg|jpeg|gif|svg|webp|ico|txt|xml|html)$/i.test(pathname)
if (!isSharedPath && !pathname.startsWith(`/${slug}`)) { if (!isSharedPath && !pathname.startsWith(`/${slug}`)) {
const rewriteUrl = request.nextUrl.clone() const rewriteUrl = request.nextUrl.clone()
@@ -96,7 +96,7 @@ export function middleware(request: NextRequest) {
// Check if it's a known non-reserved path but could be an organization slug // Check if it's a known non-reserved path but could be an organization slug
// We don't want to redirect /login, /api, etc. // We don't want to redirect /login, /api, etc.
const SHARED_PATHS = ['login', 'api', 'superadmin', 'dashboard', 'registrierung', 'impressum', 'datenschutz', '_next', 'uploads', 'favicon.ico', 'passwort-aendern'] const SHARED_PATHS = ['login', 'api', 'superadmin', 'dashboard', 'registrierung', 'impressum', 'datenschutz', '_next', 'uploads', 'favicon.ico', 'passwort-aendern']
const isStaticAsset = /\.(png|jpg|jpeg|gif|svg|webp|ico|txt|xml)$/i.test(potentialSlug) const isStaticAsset = /\.(png|jpg|jpeg|gif|svg|webp|ico|txt|xml|html)$/i.test(potentialSlug)
const isValidSlug = /^[a-z0-9][a-z0-9-]*$/.test(potentialSlug) const isValidSlug = /^[a-z0-9][a-z0-9-]*$/.test(potentialSlug)
if (potentialSlug && !SHARED_PATHS.includes(potentialSlug) && !isStaticAsset && isValidSlug) { if (potentialSlug && !SHARED_PATHS.includes(potentialSlug) && !isStaticAsset && isValidSlug) {
// This looks like a tenant path being accessed from the root domain. // This looks like a tenant path being accessed from the root domain.