try {
    // Verify the JWT token
    const decoded = jwt.verify(token, SECRET_KEY);
    console.log(decoded);
    // Attach decoded user data to the request
    (request as any).user = decoded;
    return null; // No need to return anything if token is valid
  } catch (error) {
    return NextResponse.json({ message: "Unauthorized: Invalid token" }, { status: 401 });
  }

  try {
    // Verify the JWT token
    const decoded = jwt.verify(token, SECRET_KEY);
    console.log(decoded);
    // Attach decoded user data to the request
    (request as any).user = decoded;
    return null; // No need to return anything if token is valid
  } catch (error) {
    return NextResponse.json({ message: "Unauthorized: Invalid token" }, { status: 401 });
  }

import { withAuth } from "@kinde-oss/kinde-auth-nextjs/middleware";
import { NextRequest, NextResponse } from "next/server";
import jwt from "jsonwebtoken"; // For JWT validation

const SECRET_KEY = process.env.KINDE_CLIENT_SECRET || "KINDE_CLIENT_SECRET"; // Your secret key

// JWT Validation for API routes
async function validateJwtToken(request: NextRequest) {
  const authHeader = request.headers.get("Authorization");

  console.log(authHeader);

  if (!authHeader || !authHeader.startsWith("Bearer ")) {
    console.log(authHeader)
    return NextResponse.json({ message: "Unauthorized: Missing or invalid token" }, { status: 401 });
  }

  const token = authHeader.split(" ")[1];

  try {
    // Verify the JWT token
    const decoded = jwt.verify(token, SECRET_KEY);
    console.log(decoded);
    // Attach decoded user data to the request
    (request as any).user = decoded;
    return null; // No need to return anything if token is valid
  } catch (error) {
    return NextResponse.json({ message: "Unauthorized: Invalid token" }, { status: 401 });
  }
}

export default async function middleware(req: NextRequest) {
  // Apply Kinde Auth to non-API routes
  if (!req.nextUrl.pathname.startsWith("/api/v1")) {
    return withAuth(req); // Continue with Kinde's authentication for non-API routes
  }

  // Apply JWT validation for API routes
  const jwtResponse = await validateJwtToken(req);
  if (jwtResponse) {
    return jwtResponse; // If the token is invalid, respond with Unauthorized
  }

  // If both checks pass, allow the API request to proceed
  return NextResponse.next();
}

export const config = {
  matcher: [
    // This will match all paths, allowing both non-API and API routes to be handled
    "/((?!_next/static|_next/image|favicon.ico|sitemap.xml|robots.txt).*)",
  ],
};

import { withAuth } from "@kinde-oss/kinde-auth-nextjs/middleware";
import { NextRequest, NextResponse } from "next/server";
import jwt from "jsonwebtoken"; // For JWT validation

const SECRET_KEY = process.env.KINDE_CLIENT_SECRET || "KINDE_CLIENT_SECRET"; // Your secret key

// JWT Validation for API routes
async function validateJwtToken(request: NextRequest) {
  const authHeader = request.headers.get("Authorization");

  console.log(authHeader);

  if (!authHeader || !authHeader.startsWith("Bearer ")) {
    console.log(authHeader)
    return NextResponse.json({ message: "Unauthorized: Missing or invalid token" }, { status: 401 });
  }

  const token = authHeader.split(" ")[1];

  try {
    // Verify the JWT token
    const decoded = jwt.verify(token, SECRET_KEY);
    console.log(decoded);
    // Attach decoded user data to the request
    (request as any).user = decoded;
    return null; // No need to return anything if token is valid
  } catch (error) {
    return NextResponse.json({ message: "Unauthorized: Invalid token" }, { status: 401 });
  }
}

export default async function middleware(req: NextRequest) {
  // Apply Kinde Auth to non-API routes
  if (!req.nextUrl.pathname.startsWith("/api/v1")) {
    return withAuth(req); // Continue with Kinde's authentication for non-API routes
  }

  // Apply JWT validation for API routes
  const jwtResponse = await validateJwtToken(req);
  if (jwtResponse) {
    return jwtResponse; // If the token is invalid, respond with Unauthorized
  }

  // If both checks pass, allow the API request to proceed
  return NextResponse.next();
}

export const config = {
  matcher: [
    // This will match all paths, allowing both non-API and API routes to be handled
    "/((?!_next/static|_next/image|favicon.ico|sitemap.xml|robots.txt).*)",
  ],
};

builder.Services.AddAuthentication(options =>
{
    options.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
    options.DefaultChallengeScheme = OpenIdConnectDefaults.AuthenticationScheme;

})
.AddCookie()
.AddOpenIdConnect(opt =>
{
    opt.SignedOutCallbackPath = new PathString("/signout-callback-oidc");
    opt.SignedOutRedirectUri = "/";
});

builder.Services.AddAuthentication(options =>
{
    options.DefaultScheme = CookieAuthenticationDefaults.AuthenticationScheme;
    options.DefaultChallengeScheme = OpenIdConnectDefaults.AuthenticationScheme;

})
.AddCookie()
.AddOpenIdConnect(opt =>
{
    opt.SignedOutCallbackPath = new PathString("/signout-callback-oidc");
    opt.SignedOutRedirectUri = "/";
});