export async function middleware(req: NextApiRequestWithUser) {
  const { access_token, refresh_token } = req.cookies;

  if (!access_token) {
    return NextResponse.next();
  }

  try {
    // Verify token
    const { payload, expired } = verifyAccessToken(access_token);

    if (payload) {
      if (!payload.userId) {
        return new Response("User id is missing in JWT payload.", {
          status: 401,
        });
      }
      const currentUser = await User.findById(payload.userId).lean();
      if (!currentUser) {
        return new Response(
          "The user belonging to this token no longer exist.",
          {
            status: 401,
          }
        );
      }
      req.user = currentUser;
    }

    const { payload: refreshPayload } = verifyRefreshToken(refresh_token);

    if (!refreshPayload) return NextResponse.next();

    const user = await User.findOne({ _id: refreshPayload.userId });

    if (user?.refreshToken === refresh_token && expired) {
      console.log("Refreshing access token");
      const newAccessToken = generateAccessToken(refreshPayload.userId);
      NextResponse.next().cookie(access_token, newAccessToken, {
        domain: "localhost",
        httpOnly: true,
        secure: process.env.NODE_ENV === "production",
        path: "/",
      });
      return NextResponse.next();
    }

    return NextResponse.next();
  } catch (error) {
    console.log(error);
    return NextResponse.next();
  }
}