scriptoriumadmin/supermemory
1
0
Fork 0
mirror of https://github.com/supermemoryai/supermemory.git synced 2026-11-09 08:17:31 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge 4d828e2750 into e2be9c9edd

Browse source
This commit is contained in:
Sepuri Sai Krishna 2026-08-18 09:29:00 +05:30 • committed by GitHub
commit 0e13696677
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 13 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
apps/web/middleware.ts
View file

@ -4,6 +4,10 @@ import { getPublicRequestUrl } from "@/lib/url-helpers"
const LOCAL_DEV_HOSTS = new Set(["localhost", "127.0.0.1", "::1"])
// Views that are public in guest mode. These are page views on the root route,
// selected by ?view= — see isPublicAppPage in components/ensure-workspace.tsx.
const PUBLIC_ROOT_VIEWS = new Set(["integrations", "mcp"])
function getAuthSessionCookie(request: Request): string | null {
return (
getSessionCookie(request) ??
@ -41,13 +45,15 @@ export default async function proxy(request: Request) {
return NextResponse.next()
}
// MCP setup page is public — no auth required
if (url.searchParams.get("view") === "mcp") {
return NextResponse.next()
}
// Integrations index is public in guest mode; actions still require login.
if (url.pathname === "/" && url.searchParams.get("view") === "integrations") {
// MCP setup and the integrations index are public in guest mode; actions
// still require login. The pathname check is load-bearing: this runs before
// the /api/ gate below, so matching ?view= on any path would also let
// "/api/<anything>?view=mcp" skip the 401 and reach the web app's own API
// handlers unauthenticated.
if (
url.pathname === "/" &&
PUBLIC_ROOT_VIEWS.has(url.searchParams.get("view") ?? "")
) {
return NextResponse.next()
}