Authentication

Configure session authentication, log users in through supported auth helpers, and read identity from context. Cookie flags, rotation, expiry, and secret storage remain deployment responsibilities.

Practical example

Require an authenticated session in middleware and redirect browser requests to login.

export default async function requireSession(ctx, next) {
  const user = await readAuthenticatedUser(ctx);
  if (!user) return Response.redirect(new URL("/login", ctx.url), 303);
  ctx.state.user = user;
  return next();
}

What to verify

Run this against the selected profile, inspect the generated or returned result, and add a test for both the successful path and its most important failure path.

Configuration

Keep configuration in wrnexus.config.ts, select an explicit profile, and store secrets only in validated environment variables. Use wrnexus config . --explain to review the resolved non-secret configuration.

Implementation workflow

bunx wrnexus doctor .
bunx wrnexus typecheck .
bunx wrnexus inspect routes .
bunx wrnexus build .

Start from the exact installed package page, implement the smallest server-owned contract, and add browser behavior only where interaction requires it. Run the production build because development-only success does not prove deployability.

Verification checklist

• Inputs are validated at the authoritative server boundary.
• Authentication and resource authorization are tested independently.
• Generated routes and application types are current.
• Error, empty, loading, denied, and success states are documented.
• The production artifact starts and serves the expected route.

Release scope

This guide describes installed 0.8.7 capabilities. Follow linked package declarations for exact signatures; undocumented behavior is not guaranteed.

Browse package APIs · CLI reference · Troubleshooting · Support