proxy.ts

import { NextResponse } from "next/server";
import type { NextRequest } from "next/server";

// Paths that need authentication
const protectedPaths = ["/dashboard", "/groups", "/tasks", "/schedule", "/plan"];

// Publicly accessible pages
const publicPaths = ["/login", "/signup", "/"];

export default function proxy(req: NextRequest) {
  const { pathname } = req.nextUrl;

  // Check if cookie is set (you set this manually after Firebase login)
  const isAuthenticated = req.cookies.has("authToken");

  // ✅ Skip auth checks entirely for signup and login
  if (publicPaths.some((path) => pathname.startsWith(path))) {
    return NextResponse.next();
  }

  // 🚫 Redirect unauthenticated users away from protected pages
  if (protectedPaths.some((path) => pathname.startsWith(path)) && !isAuthenticated) {
    const url = req.nextUrl.clone();
    url.pathname = "/login";
    return NextResponse.redirect(url);
  }

  // ✅ Allow everything else
  return NextResponse.next();
}

export const config = {
  matcher: ["/((?!_next/static|_next/image|favicon.ico|assets|api).*)"],
};