Something went wrong. Try again.
[READ-ONLY] Mirror of https://github.com/openstatusHQ/openstatus. 🫖 Status page with uptime monitoring & API monitoring as code 🫖 openstatus.dev
bun drizzle-orm monitoring monitoring-as-code nextjs observability on-call open-source shadcn-ui status-page statuspage synthetic-monitoring tinybird turso uptime uptime-checker uptime-monitor
Something went wrong. Try again.
4.1 kB · 129 lines
TypeScript
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130import { db, sql } from "@openstatus/db";import { page, selectPageSchema } from "@openstatus/db/src/schema";import { NextResponse } from "next/server";
import { auth } from "./lib/auth";import { resolveClientIp } from "./lib/http/client-ip";import { createProtectedCookieKey } from "./lib/protected";import { applyPageLocaleOverride } from "./lib/proxy/apply-page-locale-override";import { composePageAction } from "./lib/proxy/compose-page-action";import { detectMarkdown } from "./lib/proxy/detect-markdown";import { sanitizeRedirectParam } from "./lib/proxy/sanitize-redirect-param";import { resolveRoute } from "./lib/resolve-route";
const isSelfHosted = process.env.SELF_HOST === "true";
export default auth(async (req) => { const url = req.nextUrl.clone(); const passthroughResponse = NextResponse.next(); // HTML and markdown share the same URL (negotiated by Accept) — tell shared // caches to key on it so a markdown variant is never served to a browser. passthroughResponse.headers.set("Vary", "Accept"); const host = req.headers.get("x-forwarded-host");
// Strip a `.md` suffix before route resolution so path-based markdown // (`/foo/en/monitors/123.md`) parses slug/locale correctly. const { wantsMarkdown, source, pathname } = detectMarkdown({ pathname: url.pathname, accept: req.headers.get("accept"), });
const initialRoute = resolveRoute({ host, urlHost: url.host, pathname, });
if (!initialRoute) { return passthroughResponse; }
// Markdown requests bypass the proxy's DB lookup and gate chain: the route is // reachable directly via `/api` anyway, so it re-validates every gate itself. // Short-circuiting before the gates avoids 307-redirecting a gated `.md` to // /login (it would never reach the route). if (wantsMarkdown) { const rewriteUrl = url.clone(); rewriteUrl.pathname = `/api/markdown${initialRoute.rewritePath}`; const requestHeaders = new Headers(req.headers); requestHeaders.set("x-md-source", source ?? "header"); return NextResponse.rewrite(rewriteUrl, { request: { headers: requestHeaders }, }); }
const query = await db .select() .from(page) .where( sql`lower(${page.slug}) = ${initialRoute.prefix} OR lower(${page.customDomain}) = ${initialRoute.prefix}`, ) .get();
const validation = selectPageSchema.safeParse(query);
if (!validation.success) { return passthroughResponse; }
const _page = validation.data; const route = applyPageLocaleOverride(initialRoute, _page);
const clientIp = resolveClientIp(req.headers);
console.log("[proxy] request", { host, pathname: url.pathname, slug: _page.slug, customDomain: _page.customDomain || null, accessType: _page.accessType, route, authEmailPresent: !!req.auth?.user?.email, clientIp: clientIp ?? null, isSelfHosted, });
const action = composePageAction({ route, page: _page, host, urlHost: url.host, pathname: url.pathname, search: url.search, isSelfHosted, requestUrl: req.url, origin: req.nextUrl.origin, cookiePassword: req.cookies.get(createProtectedCookieKey(_page.slug)) ?.value, queryPassword: url.searchParams.get("pw"), redirectParam: sanitizeRedirectParam(url.searchParams.get("redirect")), authEmail: req.auth?.user?.email, clientIp, });
console.log("[proxy] action", { type: action.type, reason: action.reason, url: action.url?.toString() ?? null, });
switch (action.type) { case "redirect": return NextResponse.redirect(action.url); case "rewrite": { // HTML served via internal rewrite shares its URL with the markdown // variant — carry the same Vary so caches don't cross them. const rewriteResponse = NextResponse.rewrite(action.url); rewriteResponse.headers.set("Vary", "Accept"); return rewriteResponse; } case "passthrough": return passthroughResponse; }});
export const config = { matcher: [ "/((?!api|assets|_next/static|_next/image|favicon.ico|sitemap.xml|robots.txt).*)", ],};