Beyond the Login Page: Authentication in Next.js
summary
Outlines concrete choices: use short-lived JWTs plus a server-side revocation list to get stateless edge auth without losing session control, polyfill crypto APIs for edge runtimes, or replicate data to the edge at extra cost. Recommends bcrypt for password hashing, ZXCVBN and HaveIBeenPwned checks, and putting checks in Edge Middleware. Shows a working stack using Clerk middleware and components with useAuth/useUser and server-side auth()/currentUser APIs demonstrating a minutes-to-start Quick Start.
AI-written summary · about
chapters (4)
related talks
12mAuthentication and Authorization in Next.js
14mLeverage Hybrid Apps for Secure Auth
20mAuthentication from Scratch
39mZen and the art of edge authentication
55mBuilding Perfect Authentication in Your JS Application
27mAuthentication for the REST of us
16mAdd authentication to your React app in 5 minutes with useAuth
34mAuthentication in Nuxt