Forbid access from handleValidToken()

[alexsoyes]

When the user authenticates, I want to check if he is allowed to connect.

I think I am close but I am still able to access the /dashboard/page.tsx from Next14.

What do I do wrong?

handleValidToken: async ({ decodedToken: { email } }, headers) => {

      // UNSUCCESSFULL :)
      if (!email || !allowedEmails.includes(email)) {
        console.error('Unauthorized access', { email });
        return redirectToHome(request);
      }

      return NextResponse.next({
        request: {
          headers,
        },
      });
    }

Note: Already said but greeeeeat lib 🫶

[awinogrodzki]

Hey @alexsoyes! Thanks for reporting

Could you share your entire middleware.ts file?

[alexsoyes]

Hey @awinogrodzki !

I just realize did not provide the route in the config correclty, my mistake, thank you again for your lib!

export const config = {
  matcher: ['/api/login', '/api/logout', '/api/entities/:path*'],
};