fix: auth middleware

Author: rrd108

src/module.ts

@@ -55,7 +55,7 @@ export default defineNuxtModule<ModuleOptions>({
         passwordResetTokens: options.tables?.passwordResetTokens || defaultOptions.tables.passwordResetTokens,
       },
       auth: {
-        whitelist: options.auth?.whitelist || defaultOptions.auth?.whitelist || ['/login'],
+        whitelist: [...(defaultOptions.auth?.whitelist || []), ...(options.auth?.whitelist || [])]
       },
     }
 

src/runtime/middleware/auth.global.ts

@@ -1,6 +1,8 @@
-import { defineNuxtPlugin, useRuntimeConfig } from '#app'
+import { addRouteMiddleware, defineNuxtPlugin, useRuntimeConfig, navigateTo } from '#app'
+import type { RouteLocationNormalized } from 'vue-router'
 import type { ModuleOptions } from '../types'
 import { checkTableExists } from '../utils'
+import { useAuth } from './composables/useAuth'
 
 export default defineNuxtPlugin(async (_nuxtApp) => {
   const { nuxtUsers } = useRuntimeConfig()
@@ -10,4 +12,20 @@ export default defineNuxtPlugin(async (_nuxtApp) => {
   if (!hasMigrationsTable) {
     console.warn('[Nuxt Users] ⚠️  Migrations table does not exist, you should run the migration script to create it by running: npx nuxt-users migrate')
   }
+
+  addRouteMiddleware('auth.global', (to: RouteLocationNormalized, _from: RouteLocationNormalized) => {
+    const { user } = useAuth()
+
+    // TODO add role based access control see #55
+    if (
+      user.value || nuxtUsers.auth?.whitelist?.includes(to.path)
+    ) {
+      console.log('🔐 [Nuxt Users] Auth middleware: Access allowed')
+      return
+    }
+
+    console.log('🔐 [Nuxt Users] Auth middleware: Redirecting to login - no user and not whitelisted')
+    return navigateTo('/login')
+  },
+  { global: true })
 })