Restrict access to all animal management routes

app/animal-management-naive-dont-copy/layout.tsx

@@ -0,0 +1,26 @@
+import { cookies, headers } from 'next/headers';
+import { redirect } from 'next/navigation';
+import { getUserBySessionToken } from '../../database/users';
+
+type Props = {
+  children: React.ReactNode;
+};
+
+export default async function AnimalManagementNaiveDontCopyLayout(
+  props: Props,
+) {
+  const headersList = headers();
+  const cookieStore = cookies();
+  const sessionToken = cookieStore.get('sessionToken');
+
+  const user = !sessionToken?.value
+    ? undefined
+    : await getUserBySessionToken(sessionToken.value);
+
+  if (!user) {
+    // Redirect user to custom x-pathname header from Middleware
+    redirect(`/login?returnTo=${headersList.get('x-pathname')}`);
+  }
+
+  return props.children;
+}

middleware.ts

@@ -0,0 +1,13 @@
+import { NextRequest, NextResponse } from 'next/server';
+
+export function middleware(request: NextRequest) {
+  const requestHeaders = new Headers(request.headers);
+  // Store current request pathname in a custom header
+  requestHeaders.set('x-pathname', request.nextUrl.pathname);
+
+  return NextResponse.next({
+    request: {
+      headers: requestHeaders,
+    },
+  });
+}