noodle-run · ixahmedxi · May 25, 2024 · May 18, 2024 · May 19, 2024 · May 25, 2024
diff --git a/bun.lockb b/bun.lockb
diff --git a/cspell.config.yaml b/cspell.config.yaml
@@ -32,3 +32,4 @@ words:
   - typecheck
   - Uploadthing
   - Upstash
+  - ratelimit
diff --git a/package.json b/package.json
@@ -45,8 +45,12 @@
     }
   },
   "dependencies": {
+    "@clerk/nextjs": "^5.0.12",
+    "@clerk/themes": "^2.1.6",
     "@radix-ui/colors": "^3.0.0",
     "@t3-oss/env-nextjs": "^0.10.1",
+    "@upstash/ratelimit": "^1.1.3",
+    "@upstash/redis": "^1.31.1",
     "class-variance-authority": "^0.7.0",
     "clsx": "^2.1.1",
     "geist": "^1.3.0",

diff --git a/src/app/layout.tsx b/src/app/layout.tsx
@@ -1,5 +1,7 @@
 import type { Metadata } from 'next';
 
+import { ClerkProvider } from '@clerk/nextjs';
+import { dark } from '@clerk/themes';
 import { GeistMono } from 'geist/font/mono';
 import { GeistSans } from 'geist/font/sans';
 
@@ -23,16 +25,20 @@ export const metadata: Metadata = constructMetadata();
  */
 export default function RootLayout({ children }: PropsWithChildren) {
   return (
-    <html
-      lang="en"
-      suppressHydrationWarning
-      className={`${GeistSans.variable} ${GeistMono.variable}`}
+    <ClerkProvider
+      appearance={{ baseTheme: dark, variables: { colorPrimary: '#F9617B' } }}
     >
-      <body>
-        <ThemeProvider attribute="class" disableTransitionOnChange>
-          {children}
-        </ThemeProvider>
-      </body>
-    </html>
+      <html
+        lang="en"
+        suppressHydrationWarning
+        className={`${GeistSans.variable} ${GeistMono.variable}`}
+      >
+        <body>
+          <ThemeProvider attribute="class" disableTransitionOnChange>
+            {children}
+          </ThemeProvider>
+        </body>
+      </html>
+    </ClerkProvider>
   );
 }
diff --git a/src/env.ts b/src/env.ts
@@ -11,6 +11,8 @@ export const env = createEnv({
   },
   server: {
     PORT: z.coerce.number().default(3000),
+    UPSTASH_REDIS_REST_URL: z.string().optional(),
+    UPSTASH_REDIS_REST_TOKEN: z.string().optional(),
   },
   client: {},
   experimental__runtimeEnv: {

diff --git a/src/middleware.ts b/src/middleware.ts
@@ -0,0 +1,40 @@
+import { NextResponse } from 'next/server';
+
+import { clerkMiddleware, createRouteMatcher } from '@clerk/nextjs/server';
+import { Ratelimit } from '@upstash/ratelimit';
+import { Redis } from '@upstash/redis';
+
+import { env } from './env';
+
+let redis: Redis;
+let ratelimit: Ratelimit;
+
+if (env.UPSTASH_REDIS_REST_URL) {
+  redis = new Redis({
+    url: env.UPSTASH_REDIS_REST_URL ?? '',
+    token: env.UPSTASH_REDIS_REST_TOKEN ?? '',
+  });
+
+  ratelimit = new Ratelimit({
+    redis: redis,
+    limiter: Ratelimit.slidingWindow(20, '3 s'),
+  });
+}
+
+const isProtectedRoute = createRouteMatcher(['/app(.*)']);
+
+export default clerkMiddleware(async (auth, req) => {
+  if (isProtectedRoute(req)) auth().protect();
+
+  if (env.UPSTASH_REDIS_REST_URL) {
+    const ip = req.ip ?? '127.0.0.1';
+    const { success } = await ratelimit.limit(ip);
+    return success
+      ? NextResponse.next()
+      : NextResponse.redirect(new URL('/blocked', req.url));
+  }
+});
+
+export const config = {
+  matcher: ['/((?!.*\\..*|_next).*)', '/', '/blocked', '/(api|trpc)(.*)'],
+};