feat: add route handler to return 404 for all .well-known requests

Author: yoshinorin

__tests__/e2e/well-known.test.ts

@@ -0,0 +1,35 @@
+import { test, expect } from "@playwright/test";
+
+test.describe(".well-known", () => {
+  test("should return 404 for .well-known/security.txt", async ({ page }) => {
+    const response = await page.goto(
+      "http://localhost:3000/.well-known/security.txt"
+    );
+    expect(response.status()).toBe(404);
+  });
+
+  test("should return 404 for .well-known/apple-app-site-association", async ({
+    page
+  }) => {
+    const response = await page.goto(
+      "http://localhost:3000/.well-known/apple-app-site-association"
+    );
+    expect(response.status()).toBe(404);
+  });
+
+  test("should return 404 for .well-known/change-password", async ({
+    page
+  }) => {
+    const response = await page.goto(
+      "http://localhost:3000/.well-known/change-password"
+    );
+    expect(response.status()).toBe(404);
+  });
+
+  test("should return 404 for any .well-known path", async ({ page }) => {
+    const response = await page.goto(
+      "http://localhost:3000/.well-known/any/arbitrary/path"
+    );
+    expect(response.status()).toBe(404);
+  });
+});

src/app/.well-known/[...path]/route.ts

@@ -0,0 +1,30 @@
+/**
+ * Returns 404 for all requests to .well-known paths
+ */
+export async function GET() {
+  return new Response(null, { status: 404 });
+}
+
+export async function POST() {
+  return new Response(null, { status: 404 });
+}
+
+export async function PUT() {
+  return new Response(null, { status: 404 });
+}
+
+export async function DELETE() {
+  return new Response(null, { status: 404 });
+}
+
+export async function PATCH() {
+  return new Response(null, { status: 404 });
+}
+
+export async function HEAD() {
+  return new Response(null, { status: 404 });
+}
+
+export async function OPTIONS() {
+  return new Response(null, { status: 404 });
+}