feat: initial commit

middleware.ts

@@ -0,0 +1,32 @@
+// middleware.ts
+import { verifyRequestOrigin } from "lucia";
+import { NextResponse } from "next/server";
+import type { NextRequest } from "next/server";
+
+export async function middleware(request: NextRequest): Promise<NextResponse> {
+	if (request.method === "GET") {
+		return NextResponse.next();
+	}
+	const originHeader = request.headers.get("Origin");
+	const hostHeader = request.headers.get("Host");
+
+	if (
+		!originHeader ||
+		!hostHeader ||
+		!verifyRequestOrigin(originHeader, [hostHeader])
+	) {
+		return new NextResponse(null, {
+			status: 403,
+		});
+	}
+	return NextResponse.next();
+}
+
+export const config = {
+	matcher: [
+		// Don't handle HMR requests for the dev server we rewrite to
+		"/settings",
+		"/dashboard/(.*)",
+		"/invitation",
+	],
+};