Hacker News new | past | comments | ask | show | jobs | submit login

Not exactly your question, but since you are using NextJS I highly recommend you use its API route[0] support to proxy your backend API calls, which allows you to avoid exposing auth tokens, etc to client web front end

[0] https://nextjs.org/docs/api-routes/introduction




If the front end isn’t sending an Auth token back then the front end isn’t logged in. How do you propose making authenticated calls from the client?


Next handles the session, I mean exposing one or more OAuth/JWT for backend services.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: