Middleware

Route middleware lives in middleware/. They run in order when listed in a page's middleware array. Purpose is grouped below.

Middleware	Path	Purpose
authCheck	middleware/authCheck.js	Require logged-in user; redirect external users to external upload; redirect to login and store referring URL when not logged in
guestCheck	middleware/guestCheck.js	Allow only guests (redirect authenticated users away from login/signup)
onlyAuth	middleware/onlyAuth.js	Auth-only guard (no redirect to external upload)
checkWorkspace	middleware/checkWorkspace.js	Ensure workspace context is valid
check-workspace-access	middleware/check-workspace-access.js	Verify user has access to current workspace (client-side); sync with backend
check-dam-instance	middleware/check-dam-instance.js	Ensure DAM instance exists and is accessible
check-external-access	middleware/check-external-access.js	Validate external (share/link) access
check-if-suspended	middleware/check-if-suspended.js	Block access if account/workspace is suspended
external-upload-auth	middleware/external-upload-auth.js	Auth for external upload flow
external-guest-redirect	middleware/external-guest-redirect.js	Redirect for external guest (request-access)
external-otp-verify	middleware/external-otp-verify.js	Require OTP verification for external verify page
can-access-dam-module	middleware/can-access-dam-module.js	Permission: access DAM module
can-access-dam-settings	middleware/can-access-dam-settings.js	Permission: access DAM settings
can-access-dam-subscription-billing	middleware/can-access-dam-subscription-billing.js	Permission: access subscription/billing
can-access-general-settings	middleware/can-access-general-settings.js	Permission: access general workspace settings
gdrive-auth	middleware/gdrive-auth.js	Google Drive OAuth flow
dropbox-auth	middleware/dropbox-auth.js	Dropbox OAuth flow
box-auth	middleware/box-auth.js	Box OAuth flow
apple	middleware/apple.js	Apple-related auth or redirect