From acd30cfdeab7054d067f030ee20bcd8741488a73 Mon Sep 17 00:00:00 2001
From: Michael SCHAL <michaelschal@gmail.com>
Date: Tue, 7 Apr 2026 12:31:58 +0200
Subject: [PATCH] feat: implement authentication middleware and configure
 Claude project permissions

---
 .claude/settings.json | 3 ++-
 src/middleware.ts     | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.claude/settings.json b/.claude/settings.json
index dbb71b5..52a30b9 100644
--- a/.claude/settings.json
+++ b/.claude/settings.json
@@ -29,7 +29,8 @@
       "WebFetch(domain:collect.ffnancy.fr)",
       "Bash(curl -s \"https://collect.ffnancy.fr/api/diag-mvtart\")",
       "Read(//c/Users/Michael/VSCODE/CollectFlow/**)",
-      "Bash(xargs wc:*)"
+      "Bash(xargs wc:*)",
+      "Bash(ls /c/Users/Michael/VSCODE/CollectFlow/.next/static/chunks/*.css)"
     ]
   }
 }
diff --git a/src/middleware.ts b/src/middleware.ts
index 56e8070..4a9fc52 100644
--- a/src/middleware.ts
+++ b/src/middleware.ts
@@ -9,7 +9,7 @@ export default auth((req) => {
     const { nextUrl } = req;
 
     const isApiAuthRoute = nextUrl.pathname.startsWith("/api/auth");
-    const isPublicRoute = nextUrl.pathname === "/login" || nextUrl.pathname.startsWith("/public");
+    const isPublicRoute = nextUrl.pathname === "/login" || nextUrl.pathname.startsWith("/public/");
 
     // 1. Laisser passer les requêtes d'auth API
     if (isApiAuthRoute) return NextResponse.next();