middleware.ts

import { NextResponse } from 'next/server';
import type { NextRequest } from 'next/server';

export function middleware(request: NextRequest) {
  const path = request.nextUrl.pathname;

  // Define paths that are considered public (accessible without a token)
  const isPublicPath = ['/verifyemail', '/logout'].includes(path);

  // Get the token from the cookies
  const token = request.cookies.get('token')?.value || '';

  // Redirect logic based on the path and token presence
  if (isPublicPath && token) {
    return NextResponse.redirect(new URL('/', request.nextUrl));
  }

  // If trying to access a protected path without a token, redirect to the login page
  if (!isPublicPath && !token) {
    return NextResponse.redirect(new URL('/login', request.nextUrl));
  }
}

// It specifies the paths for which this middleware should be executed.
export const config = {
  matcher: [
    '/',
    '/profile',
    '/verifyemail',
    '/deleteAccount', // Add protected route here
  ],
};