Profile My skills Saved Collections Edit profile Submit a skill

Next.js Authentication

Secure token storage (HttpOnly Cookies) and Middleware patterns.

ngxtm e439211 2 files · 2.7 KB Updated
Web & Frontend

File contents

Authentication & Token Management

Priority: P0 (CRITICAL)

Use HttpOnly Cookies for token storage. Never use LocalStorage.

Key Rules

  1. Storage: Use cookies().set() with httpOnly: true, secure: true, sameSite: 'lax'.
    • Reference: Auth Implementation (See "Setting Tokens").
  2. Access: Read tokens in Server Components via cookies().get().
    • Reference: Auth Implementation (See "Reading Tokens").
  3. Protection: Guard routes in middleware.ts before rendering.
    • Reference: Auth Implementation (See "Middleware Protection").

Anti-Pattern: LocalStorage

  • Security Risk: Vulnerable to XSS.
  • Performance Hit: Incompatible with Server Components (RSC). Forces client hydration and causes layout shift.

ngxtm/devkit/tree/main/rules/nextjs/authentication commit e439211e86

Browse category

Frequently asked questions

npx skillmds@latest add ngxtm-devkit/next-js-authentication