Feature/error logs

.gitignore

@@ -1,3 +1,9 @@
+# Stored error-log audio (admin playback)
+service/error_audio/
+
+# macOS
+.DS_Store
+
 # Byte-compiled / optimized / DLL files
 __pycache__/
 *.py[cod]

app/.env.example

@@ -1,5 +1,9 @@
 DATABASE_URL=XXXXXXXXXXX
 NEXT_PUBLIC_MICROSERVICE_URL=XXXXXXXXXXX
+
+# Basic auth for /admin routes (format: user:password or user:password|user2:password2)
+# Optional: when set, visiting /admin/* will prompt for these credentials.
+BASIC_AUTH_CREDENTIALS=admin:your-secure-password
 AWS_REGION=XXXXXXXXXXX
 AWS_ACCESS_KEY_ID=XXXXXXXXXXX
 AWS_SECRET_ACCESS_KEY=XXXXXXXXXXX

app/middleware.ts

@@ -0,0 +1,38 @@
+import { createNextAuthMiddleware } from "nextjs-basic-auth-middleware";
+import { NextRequest, NextResponse } from "next/server";
+
+/**
+ * Parse BASIC_AUTH_CREDENTIALS env (format: user:password or user:password|user2:password2)
+ * into users array. Package expects { name, password } per user.
+ */
+function getUsersFromEnv(): { name: string; password: string }[] {
+  const raw = process.env.BASIC_AUTH_CREDENTIALS;
+  if (!raw?.trim()) return [];
+  return raw
+    .split("|")
+    .map((pair) => {
+      const [name, ...rest] = pair.trim().split(":");
+      const password = rest.join(":").trim();
+      return name && password ? { name, password } : null;
+    })
+    .filter((u): u is { name: string; password: string } => u !== null);
+}
+
+export const config = {
+  // Protect only /admin routes. Use ['/(.*)'] to protect the whole app.
+  matcher: ["/admin/:path*"],
+};
+
+export default function middleware(req: NextRequest) {
+  const users = getUsersFromEnv();
+  // Only run basic auth when credentials are configured
+  if (users.length === 0) {
+    return NextResponse.next();
+  }
+  const authMiddleware = createNextAuthMiddleware({
+    users,
+    realm: "Admin",
+    message: "Authentication failed",
+  });
+  return authMiddleware(req);
+}