add mutual friendship middleware

essential-randomness · essential-randomness · commit 8e13c9e1106d · 2025-10-09T17:24:39.000-07:00
diff --git a/astro-authproto/__example__/src/middleware.ts b/astro-authproto/__example__/src/middleware.ts
@@ -0,0 +1,35 @@
+import { defineMiddleware } from "astro:middleware";
+import { AtpBaseClient } from "@atproto/api";
+
+const MS_BOBA_DID = "did:plc:r2vpg2iszskbkegoldmqa322";
+const HAETAE_DID = "did:plc:dg2qmmjic7mmecrbvpuhtvh6";
+const FUJOCODED_DID = "did:plc:737bslnnf7vyaktosjlrshmd";
+
+const FRIENDS_ONLY_PAGES = ["/secret"];
+
+export const onRequest = defineMiddleware(async (context, next) => {
+    if (!FRIENDS_ONLY_PAGES.includes(context.url.pathname)) {
+        return next();
+    }
+    const loggedInDid = context.locals.loggedInUser?.did;
+    if (!loggedInDid) {
+        return context.redirect("/?reason=unauthorized");
+    }
+
+    const agent = new AtpBaseClient("https://public.api.bsky.app");
+    const relationships = await agent.app.bsky.graph.getRelationships({ actor: HAETAE_DID, others: [loggedInDid] });
+    const usersRelationship = relationships.data.relationships.at(0);
+
+    // True if the current user follows you 
+    const follower = usersRelationship && "followedBy" in usersRelationship && Boolean(usersRelationship.followedBy);
+    // True if you follow the current user
+    const following = usersRelationship && "following" in usersRelationship && Boolean(usersRelationship.following);
+    // True if this is a mutual relationship
+    const mutuals = follower && following;
+
+    if (!following) {
+        return context.redirect("/?reason=unauthorized");
+    }
+
+    return next();
+});
diff --git a/astro-authproto/__example__/src/pages/secret.astro b/astro-authproto/__example__/src/pages/secret.astro
@@ -1,28 +1,5 @@
 ---
 import Login from "../../../dist/components/Login.astro";
-import {AtpBaseClient} from "@atproto/api";
-
-const MS_BOBA_DID = "did:plc:r2vpg2iszskbkegoldmqa322";
-const HAETAE_DID = "did:plc:dg2qmmjic7mmecrbvpuhtvh6";
-const FUJOCODED_DID = "did:plc:737bslnnf7vyaktosjlrshmd";
-const user = Astro.locals.loggedInUser;
-if (!user?.did) {
-    return Astro.redirect("/?reason=unauthorized");
-}
-const agent = new AtpBaseClient("https://public.api.bsky.app");
-const relationships = await agent.app.bsky.graph.getRelationships({actor: FUJOCODED_DID, others: [user.did]});
-const usersRelationship = relationships.data.relationships.at(0);
-
-// True if the current user follows you 
-const follower =  usersRelationship && "followedBy" in usersRelationship && Boolean(usersRelationship.followedBy);
-// True if you follow the current user
-const following = usersRelationship && "following" in usersRelationship && Boolean(usersRelationship.following);
-// True if this is a mutual relationship
-const mutuals = follower && following;
-
-if (!following) {
-    return Astro.redirect("/?reason=unauthorized");
-}
 ---
 
 <html lang="en">
@@ -34,7 +11,7 @@ if (!following) {
     <title>Astro</title>
   </head>
   <body>
-    Only friends allowed. You {user.handle}, are a friend.
+    Only friends allowed. You {Astro.locals.loggedInUser!.handle}, are a friend.
     <Login />
   </body>
 </html>
