Skip to main contentData Garden

Archive

#auth

2 notes match these filters

Clear filters
  • Next.js in Practice · Part 2815 min read

    Client-Only Auth - Tokens in the Browser

    Auth handled entirely in the browser against an external API, compatible with output 'export': an AuthProvider, where to keep tokens, refresh-token rotation with a fetch wrapper and TanStack Query, client route guards, OAuth PKCE, cross-tab logout, and how it compares with server-aware auth.

  • Next.js in Practice · Part 2721 min read

    Server-Aware Auth - Sessions, Proxy and the DAL

    A complete cookie-session auth build for Next.js 16, covering encrypted sessions with jose, login and logout Server Actions, an optimistic check in proxy.ts, a Data Access Layer with verifySession, authorization in actions and Route Handlers, unauthorized() and forbidden(), and the rules for auth under Cache Components.