fix(pwa): 인증 프록시에서 PWA 경로 허용

.github/workflows/ci.yml

@@ -23,12 +23,14 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '20'
+          node-version: '22'
           cache: 'pnpm'
 
       - name: Install Dependencies
         run: pnpm install --frozen-lockfile
 
+      - name: Run proxy regression test
+        run: pnpm test:proxy
 
       - name: Run ESLint
         run: pnpm lint

package.json

@@ -3,6 +3,7 @@
   "version": "0.1.0",
   "private": true,
   "scripts": {
+    "test:proxy": "node --no-warnings --experimental-strip-types --test tests/publicProxyPaths.test.mjs",
     "dev": "next dev",
     "dev:insecure": "NODE_TLS_REJECT_UNAUTHORIZED=0 next dev",
     "build": "next build",

src/proxy.ts

@@ -1,15 +1,12 @@
 import { type NextRequest, NextResponse } from "next/server";
 import { COOKIE_KEYS } from "@/shared/constants/cookies";
+import { isPublicProxyPath } from "@/shared/lib/publicProxyPaths";
 
 export async function proxy(request: NextRequest) {
   const { pathname } = request.nextUrl;
   const accessToken = request.cookies.get(COOKIE_KEYS.ACCESS_TOKEN)?.value;
 
-  if (
-    pathname.startsWith("/api/") ||
-    pathname === "/sign-in" ||
-    pathname === "/app-download"
-  ) {
+  if (isPublicProxyPath(pathname)) {
     return NextResponse.next();
   }
 

src/shared/lib/publicProxyPaths.ts

@@ -0,0 +1,10 @@
+const PUBLIC_PROXY_PATHS = new Set([
+  "/sign-in",
+  "/app-download",
+  "/manifest.webmanifest",
+  "/firebase-messaging-sw.js",
+]);
+
+export function isPublicProxyPath(pathname: string) {
+  return pathname.startsWith("/api/") || PUBLIC_PROXY_PATHS.has(pathname);
+}

tests/publicProxyPaths.test.mjs

@@ -0,0 +1,15 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import { isPublicProxyPath } from "../src/shared/lib/publicProxyPaths.ts";
+
+test("allows public PWA assets through the authentication proxy", () => {
+  for (const pathname of [
+    "/manifest.webmanifest",
+    "/firebase-messaging-sw.js",
+  ]) {
+    assert.equal(isPublicProxyPath(pathname), true, pathname);
+  }
+
+  assert.equal(isPublicProxyPath("/machines"), false);
+});