Fix anyone can access /profile-picture-check and /role (#169)

* Fix anyone can access /profile-picture-check and /role * fix typo * prettier -w --------- Co-authored-by: mozsarmate <[email protected]>
kir-dev · Feb 22, 2025 · 6a1e3c5 · 6a1e3c5
1 parent 75d141b
commit 6a1e3c5
Showing 1 changed file with 14 additions and 2 deletions.
diff --git a/apps/frontend/src/middleware.ts b/apps/frontend/src/middleware.ts
@@ -17,7 +17,11 @@ export function middleware(request: NextRequest) {
     }
   }
 
-  if (request.nextUrl.pathname.startsWith('/periods')) {
+  if (
+    request.nextUrl.pathname.startsWith('/periods') ||
+    request.nextUrl.pathname.startsWith('/roles') ||
+    request.nextUrl.pathname.startsWith('/profile-picture-check')
+  ) {
     if (role === 'BODY_MEMBER' || role === 'BODY_ADMIN' || role === 'SUPERUSER') {
       return NextResponse.next();
     }
@@ -27,5 +31,13 @@ export function middleware(request: NextRequest) {
   return NextResponse.next();
 }
 export const config = {
-  matcher: ['/profile', '/application-form', '/periods', '/applications', '/periods/:path*'],
+  matcher: [
+    '/profile',
+    '/application-form',
+    '/periods',
+    '/applications',
+    '/periods/:path*',
+    '/profile-picture-check',
+    '/roles',
+  ],
 };