import { NextResponse } from "next/server";
import { jwtVerify } from "jose";

export async function middleware(req) {
  const token = req.cookies.get("session")?.value;
  if (!token) return NextResponse.redirect("/login");

  try {
    await jwtVerify(token, new TextEncoder().encode(SECRET));
    return NextResponse.next();
  } catch {
    return NextResponse.redirect("/login?expired=1");
  }
}

from fastapi import FastAPI, HTTPException, Request
import redis.asyncio as redis

app = FastAPI()
r = redis.from_url("redis://localhost:6379")

@app.middleware("http")
async def rate_limiter(request: Request, call_next):
    ip = request.client.host
    hits = await r.incr(f"rate:{ip}")
    if hits == 1: await r.expire(f"rate:{ip}", 60)
    if hits > 100: raise HTTPException(429, "Too Many Requests")
    return await call_next(request)

import { useOptimistic, useTransition } from "react";

export function useOptimisticTodos(initialTodos, serverAction) {
  const [isPending, startTransition] = useTransition();
  const [todos, addTodo] = useOptimistic(
    initialTodos,
    (state, newTodo) => [...state, { ...newTodo, pending: true }]
  );

  const save = (todo) => {
    startTransition(async () => {
      addTodo(todo);
      await serverAction(todo);
    });
  };
  return { todos, save, isPending };
}