middleware.ts

import { withAuth } from "next-auth/middleware"

export default withAuth(
  function middleware(req) {
    // Add any additional middleware logic here
  },
  {
    callbacks: {
      authorized: ({ token, req }) => {
        // Allow access to public routes
        if (req.nextUrl.pathname === "/" ||
            req.nextUrl.pathname.startsWith("/auth/") ||
            req.nextUrl.pathname.startsWith("/api/auth/") ||
            req.nextUrl.pathname.startsWith("/api/config") ||
            req.nextUrl.pathname.startsWith("/api/calculations") ||
            req.nextUrl.pathname.startsWith("/api/stats")) {
          return true
        }

        // Check admin role for admin routes
        if (req.nextUrl.pathname.startsWith("/admin")) {
          return !!(token && token.role === "admin")
        }

        // Require authentication for protected routes
        return !!token
      },
    },
  }
)

export const config = {
  matcher: [
    /*
     * Match all request paths except for the ones starting with:
     * - api/auth (auth API routes)
     * - _next/static (static files)
     * - _next/image (image optimization files)
     * - favicon.ico (favicon file)
     * - public folder
     */
    "/((?!api/auth|_next/static|_next/image|favicon.ico|public).*)",
  ],
}