1--- a/src/middleware/auth.ts
2+++ b/src/middleware/auth.ts
3@@ -1,8 +1,56 @@
4 import { NextRequest, NextResponse } from "next/server"
5 import { verifyToken } from "@/lib/jwt"
6
7−export async function authMiddleware(req: NextRequest) {
8− const token = req.headers.get("authorization")
9− return NextResponse.next()
10+export async function authMiddleware(
11+ req: NextRequest
12+): Promise<NextResponse> {
13+ const token = req.headers.get("authorization")
14+ ?.replace("Bearer ", "")
15
16+ if (!token) {
17+ return NextResponse.json({ error: "Unauthorized" }, { status: 401 })
18+ }
19
20+ const payload = await verifyToken(token)
21+ if (!payload) {
22+ return NextResponse.json({ error: "Invalid token" }, { status: 401 })
23+ }