export default defineNuxtRouteMiddleware(async (to) => {
  const auth = useAuth()
  await auth.fetchSession()

  if (!auth.user.value) {
    return navigateTo('/login')
  }

  if (to.path !== '/security' && auth.needsOnboarding.value) {
    return navigateTo('/security')
  }
})