Swasthify Healthcare Platform

const { S3Client, PutObjectCommand } = require("@aws-sdk/client-s3");
const { getSignedUrl } = require("@aws-sdk/s3-request-presigner");

const s3 = new S3Client({ region: process.env.AWS_REGION });

async function getUploadUrl(patientId, fileName, fileType) {
  const key = `health-records/${patientId}/${Date.now()}-${fileName}`;
  const command = new PutObjectCommand({
    Bucket: process.env.S3_BUCKET_NAME,
    Key: key,
    ContentType: fileType,
  });

  const uploadUrl = await getSignedUrl(s3, command, { expiresIn: 3600 });
  return { uploadUrl, key };
}

import { NextResponse } from "next/server";
import type { NextRequest } from "next/server";
import { checkFirebaseClaims } from "@/lib/auth-service";

export async function middleware(request: NextRequest) {
  const token = request.cookies.get("session")?.value;
  const path = request.nextUrl.pathname;

  if (!token) {
    return NextResponse.redirect(new URL("/login", request.url));
  }

  const claims = await checkFirebaseClaims(token);

  if (path.startsWith("/doctor") && claims.role !== "doctor") {
    return NextResponse.redirect(new URL("/unauthorized", request.url));
  }
  if (path.startsWith("/lab") && claims.role !== "lab") {
    return NextResponse.redirect(new URL("/unauthorized", request.url));
  }
  if (path.startsWith("/admin") && claims.role !== "admin") {
    return NextResponse.redirect(new URL("/unauthorized", request.url));
  }

  return NextResponse.next();
}