Middleware

Middleware

Stelo CMS uses Next.js middleware for authentication, access control, and internationalization.

Authentication Middleware

Protects admin routes and API endpoints:

middleware.ts

export function middleware(request: NextRequest) {
  // Authentication check
  if (isAdminRoute(request.nextUrl.pathname)) {
    return withAuth(request);
  }

  // Internationalization
  return withI18n(request);
}

Access Control

Role-based access control for different areas:

• Admin panel access
• API endpoint protection
• Content visibility rules

Internationalization

Automatic locale detection and routing:

• URL-based locale detection
• Cookie-based locale preference
• Automatic redirects

Rate Limiting

Protection against abuse:

• API rate limiting
• Authentication attempt limits
• File upload restrictions

Configuration

export const config = {
  matcher: [
    '/((?!api|_next/static|_next/image|favicon.ico).*)',
    '/api/(.*)'
  ]
};

This section will be expanded with detailed implementation examples.