Leverage Hybrid Apps for Secure Auth

on YouTube ↗14m

" summary

Argues that a NextJS hybrid app keeps SSG performance while moving auth to server-side pieces: uses NextAuth to mint JWTs, exposes an API route proxy on the frontend to fetch tokens and enforce per-request timeouts, and wires sessions into the UI via react-query and a session provider/layout wrapper. Resulting system avoids localStorage token leakage, adds an extra API protection layer, reduces maintenance, and lets teams pivot to single sign‑on with a single provider change.

AI-written summary · about

" chapters (7)

1. 0:00Start
2. 2:34LEVERAGE HYBRID APPS FOR SECURE AUTH
3. 6:36Clunky authorization layer
4. 8:50Step 1
5. 11:26Step 2
6. 12:54Clean, standardized code
7. 13:13Pivot simply. Enable SSO.

" related talks

• 09mBeyond the Login Page: Authentication in Next.jsDev Agrawal · Next.js Conf 2023
• 12mAuthentication and Authorization in Next.jsProsper Otemuyiwa · ZEIT Day 2018
• 28mProtecting your Apps with Next.jsJames Q Quick · Next.js Conf 2021
• 27mMastering Secure Single Page Apps & APIsGary Archer · apidays London 2023
• 20mAuthentication from ScratchAdam Jahr · Vue.js Amsterdam 2020
• 15mBuilding Isomorphic JavaScript Apps Faster with Next.jsCS Madhav · JSFoo 2019
• 33mAuth for React.js APPNykyta Halkyn · React fwdays'21
• 27mAuthentication for the REST of usDivya Sasidharan · NationJS Frontrunners 2019