fix middleware

deskrispi:
- perbaiki middleware untuk versi diatas 1.4.6
No Issuee

src/app/api/user-validate/route-v.1.4.5.txt

@@ -0,0 +1,67 @@
+import { decrypt } from "@/app/(auth)/_lib/decrypt";
+import { prisma } from "@/lib";
+import { cookies } from "next/headers";
+import { NextResponse } from "next/server";
+export const dynamic = "force-dynamic";
+
+export async function GET(req: Request) {
+  try {
+    const SESSIONKEY = process.env.NEXT_PUBLIC_BASE_SESSION_KEY!;
+    // const token = req.headers.get("Authorization")?.split(" ")[1]
+    const token =
+      cookies().get(SESSIONKEY)?.value ||
+      req.headers.get("Authorization")?.split(" ")[1];
+    if (!token) {
+      return NextResponse.json(
+        {
+          success: false,
+          message: "Unauthorized token not found",
+        },
+        { status: 401 }
+      );
+    }
+
+    const decripted = await decrypt({
+      token: token!,
+      encodedKey: process.env.NEXT_PUBLIC_BASE_TOKEN_KEY!,
+    });
+
+    if (!decripted) {
+      await prisma.$disconnect();
+      return NextResponse.json(
+        {
+          success: false,
+          message: "Unauthorized",
+        },
+        { status: 401 }
+      );
+    }
+
+    const user = await prisma.user.findUnique({
+      where: {
+        id: decripted.id,
+      },
+    });
+
+    // Disconnect after successful query
+
+    return NextResponse.json({
+      success: true,
+      message: "Berhasil mendapatkan data",
+      data: user,
+    });
+  } catch (error) {
+    // Ensure connection is closed even if error occurs
+
+    console.error("Error in user validation:", error);
+    return NextResponse.json(
+      {
+        success: false,
+        message: "Terjadi kesalahan pada server",
+      },
+      { status: 500 }
+    );
+  } finally {
+    await prisma.$disconnect();
+  }
+}

src/app/api/user-validate/route.ts

@@ -2,15 +2,22 @@ import { decrypt } from "@/app/(auth)/_lib/decrypt";
 import { prisma } from "@/lib";
 import { cookies } from "next/headers";
 import { NextResponse } from "next/server";
+
 export const dynamic = "force-dynamic";
 
 export async function GET(req: Request) {
   try {
     const SESSIONKEY = process.env.NEXT_PUBLIC_BASE_SESSION_KEY!;
-    // const token = req.headers.get("Authorization")?.split(" ")[1]
-    const token =
-      cookies().get(SESSIONKEY)?.value ||
-      req.headers.get("Authorization")?.split(" ")[1];
+    const TOKENKEY = process.env.NEXT_PUBLIC_BASE_TOKEN_KEY!;
+    const cookieStore = cookies();
+
+    const authHeader = req.headers.get("Authorization") || "";
+    const bearerToken = authHeader.startsWith("Bearer ")
+      ? authHeader.split(" ")[1]
+      : undefined;
+
+    const token = cookieStore.get(SESSIONKEY)?.value || bearerToken;
+
     if (!token) {
       return NextResponse.json(
         {
@@ -21,17 +28,16 @@ export async function GET(req: Request) {
       );
     }
 
-    const decripted = await decrypt({
-      token: token!,
-      encodedKey: process.env.NEXT_PUBLIC_BASE_TOKEN_KEY!,
+    const decrypted = await decrypt({
+      token,
+      encodedKey: TOKENKEY,
     });
 
-    if (!decripted) {
-      await prisma.$disconnect();
+    if (!decrypted?.id) {
       return NextResponse.json(
         {
           success: false,
-          message: "Unauthorized",
+          message: "Unauthorized: invalid token data",
         },
         { status: 401 }
       );
@@ -39,11 +45,30 @@ export async function GET(req: Request) {
 
     const user = await prisma.user.findUnique({
       where: {
-        id: decripted.id,
+        id: decrypted.id,
       },
     });
 
-    // Disconnect after successful query
+    if (!user) {
+      return NextResponse.json(
+        {
+          success: false,
+          message: "User tidak ditemukan",
+        },
+        { status: 404 }
+      );
+    }
+
+    if (!user.active) {
+      return NextResponse.json(
+        {
+          success: false,
+          message: "User belum aktif",
+          data: user,
+        },
+        { status: 403 }
+      );
+    }
 
     return NextResponse.json({
       success: true,
@@ -51,8 +76,6 @@ export async function GET(req: Request) {
       data: user,
     });
   } catch (error) {
-    // Ensure connection is closed even if error occurs
-
     console.error("Error in user validation:", error);
     return NextResponse.json(
       {