From f7445bf8a19ab9d611fbacbe0bf4e08d12fff93f Mon Sep 17 00:00:00 2001
From: Alex van Andel <me@alexvanandel.com>
Date: Wed, 8 Feb 2023 16:27:18 +0000
Subject: [PATCH] Block /auth/:path, nothing else. (#6949)

* Block /auth/:path, nothing else.

* Also add /signup
---
 apps/web/next.config.js | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/apps/web/next.config.js b/apps/web/next.config.js
index b76ea1b273..ddbc2043e2 100644
--- a/apps/web/next.config.js
+++ b/apps/web/next.config.js
@@ -185,8 +185,16 @@ const nextConfig = {
   async headers() {
     return [
       {
-        // prettier-ignore
-        source: "/:path*((?<!\/embed$)(?<!\/embed\/preview\.html$))",
+        source: "/auth/:path*",
+        headers: [
+          {
+            key: "X-Frame-Options",
+            value: "DENY",
+          },
+        ],
+      },
+      {
+        source: "/signup",
         headers: [
           {
             key: "X-Frame-Options",