Protect Your API - Next Auth Middleware

In this video, we will look at how we can protect our API made with next js using middleware or to be specific next auth middleware.

Previous Video:
Next Auth Sign in With Credentials:

Other Next JS Related Videos

Social Media Links

[fsniraj]

Some of you have this concern, when you use ['/admin'] for matcher config. only the /admin is going to be private not all admin routes like /admin/posts. You can use ["/admin/:path*"] to restrict all of the admin path.

[faruksardar]

Simple, Easy to Understand,

Thank for so much Niraj for this video

[markkkkk]

AMAZING!! Simple, fast and understandable explanation

[ingolesubodh]

goddamn bro you are awesome !! you will go big soon <3 The voiceover is magic too 👍

[wazzadev]

Your next auth tutorials have been helpful and very straight forward, thanks.

[BuntyWP]

Very clean and simple explanation. Thank You

[vladsvyrydonov]

Very nice, just everything I was looking for.

[Iacapuca]

This approach only works for JWT tokens at the moment, next-auth middleware dos not support session based auth.

[mertdr]

Thanks for the video. One question though, how could you use withAuth for multiple cases on middleware routes? After NextJS removed support for multiple middleware files, withAuth looks like pretty useless. Creating a standard NextJS middleware function and catching session and then applying rules is a better idea, am I right?

[tomyyoung]

Yes a fix,
Especially for a client website

[antoniuneacsu]

Can you declare matchers so that it matches all routes except /login?

[thebocksters]

how you know that if authorized function returns true then the middleware gets triggered, I tested it with "return true" in the callback and it didn't fired the middleware

[himanshu]

when deployed on vercel middleware is broken it just redirect to signin even i try login and successfully loggedin it do not consider protected routes of nextauth and always redirect to signin when i access them

[evgeniy]

Hi. if the "pages" folder is nested in the "src" folder, which is located along with the middleware file in the root of the project, will the middleware work?

[SSango-hksm]

Hie Niraj great tut once again. I have a question. I have two tables a users and workspaces table linked by a one to many relationship. I would like to implement an onboarding experience whereby after the user is signed in I would like to check if that user has a workspace linked to his/her user account if not then redirect to the page where you can create the workspace. I'm failing to figure out how I can implement that in the middleware. I'm using postgre and prisma adapter by the way.

[cdromance]

How do you get your VSCode to show the param definitions on hover for the jwt callback at 6:22? Having something like this in my ide would make my life much easier.

[vatsalcodes]

how to change the redirect url when we try to access secured page without being authenticated

[Prathamesh-on]

do one video of how to connect with an api and fetch users in login

[rh]

I'm running into the issues where role doesn't seem to exist in the (params.user?.role) callback function of [...nextauth].ts. I added it in the list of returns for a user but it still doesn't seem to exist. Has anyone else run into this issue?

[deathdefier]

Hey Niraj, is it possible to user a matcher that works on dynamic pages that use a slug? Please help me with a solution if you know how to, Thanks!