feat: #2 add access control by

access code

middleware.ts

@@ -0,0 +1,30 @@
+import { NextRequest, NextResponse } from "next/server";
+import { ACCESS_CODES } from "./app/api/access";
+import md5 from "spark-md5";
+
+export const config = {
+  matcher: ["/api/chat", "/api/chat-stream"],
+};
+
+export function middleware(req: NextRequest, res: NextResponse) {
+  const accessCode = req.headers.get("access-code");
+  const hashedCode = md5.hash(accessCode ?? "").trim();
+
+  console.log("[Auth] allowed hashed codes: ", [...ACCESS_CODES]);
+  console.log("[Auth] got access code:", accessCode);
+  console.log("[Auth] hashed access code:", hashedCode);
+
+  if (!ACCESS_CODES.has(hashedCode)) {
+    return NextResponse.json(
+      {
+        needAccessCode: true,
+        hint: "Please go settings page and fill your access code.",
+      },
+      {
+        status: 401,
+      }
+    );
+  }
+
+  return NextResponse.next();
+}