Securing api routes in NextJs

[billtlee]

Hi,
We are using web3auth to authenticate users on our NextJs app. It works well on the client side. What is the best approach to secure api routes on the server? Thanks in advance!

Bill

[himanshuchawla009]

You can use the idToken returned by web3auth to secure you backend api endpoints, plz refer to this doc to know more:-
https://web3auth.io/docs/server-side-verification/

[shahbaz17]

Here's an example:

https://github.com/Web3Auth/examples/blob/main/web-core-sdk/server-side-verification/ssv-via-social-nextjs-core-example/pages/App.tsx#L93

https://github.com/Web3Auth/examples/blob/main/web-core-sdk/server-side-verification/ssv-via-social-nextjs-core-example/pages/api/login.ts

[billtlee]

Thanks!