if (login_exempt_urls.matching.includes(request.nextUrl.pathname)){
        //if the path is in the list of ignorable URLs, do not do the middleware process
        return NextResponse.next()
    }else{
        //if the url contains a part of the "contains" urls, skip it. 
        //this is for static assets such as css and js
        let skipThis = false
        login_exempt_urls.contains.forEach((url)=>{
            if (request.nextUrl.pathname.includes(url)){
                skipThis = true
            }
        })

        if (skipThis){
            return NextResponse.next()
        }
    }
    //validate the user's cookie
    const result = await verifyAuth(request)
    //if we don't skip this URL and the cookies are invalid, redirect.
    if (!result){
        return NextResponse.redirect(new URL('/login', request.url))
    }

const login_exempt_urls = {
    matching:["/",
        "",
        "/login",
        "/api/login",
        "/register",
        "/api/register",
        "/pwreset",
        "/api/resetPassword",
        "/api/finalResetStep"
    ],
    contains:[
        '_next/static/',
        "/resetPassword",
        "/portfolio/",
        "/verify"
    ]
}

import { NextResponse } from "next/server";
import * as jose from "jose";
const JWT_SECRET = "7hhs8992hhs7h7hs8hdb772b10**7$#";
// This function can be marked `async` if using `await` inside
export async function middleware(request) {
  const token = request.cookies.get("token")?.value || "";
  const urlPath = new URL(request.url).pathname;
  // console.log("urlpath", urlPath);

  try {
    const secret = new TextEncoder().encode(JWT_SECRET);
    const { payload } = await jose.jwtVerify(token, secret);
    //user is really an admin

    if (request.url.includes("/login") && payload.role == "admin") {
      return NextResponse.redirect(new URL("/", request.nextUrl));
    }
  } catch (error) {
    console.log("middleware_error", error);

    if (urlPath == "") return;
    if (request.url.includes("/api/")) {
      return NextResponse.json({
        message: "You are not authorized to access this",
      });
    }
    if (!request.url.includes("/login")) {
      console.log("ran");
      return NextResponse.redirect(new URL("/", request.nextUrl));
    }
  }
}

// See "Matching Paths" below to learn more
export const config = {
  matcher: [
    "/post/add",
    "/contributor/add",
    "/api/admin/post",
    "/api/admin/post/:id*",
    "/login",
  ],
};