import { NextResponse } from "next/server"
import type { NextRequest } from "next/server"

const authRoutes = [
    "/login",
    "/signup",
    "/forgot-password",
    "/reset-password",
]

export function proxy(req: NextRequest) {
    const path = req.nextUrl.pathname
    const isAuthRoute = authRoutes.some((route) => path.startsWith(route))

    // Check specifically for the session token cookie
    // (better-auth.session_token or __Secure-better-auth.session_token in HTTPS)
    // Other better-auth cookies like last_used_login_method persist after logout
    const hasSession = req.cookies
        .getAll()
        .some(
            (cookie) =>
                cookie.name.endsWith("better-auth.session_token") &&
                cookie.value.length > 0,
        )

    // Redirect authenticated users away from auth pages
    if (isAuthRoute && hasSession) {
        return NextResponse.redirect(new URL("/", req.url))
    }

    return NextResponse.next()
}

export const config = {
    matcher: ["/((?!api|_next/static|_next/image|.*\\.png$).*)"],
}