Next.js: Using HTTP-Only Cookies for Secure Authentication (2023)

The example code for this post has been updated to use Next.js 13 and getServerSideProps instead of getInitialProps. Most modern REST and GraphQL APIs expect an authentication token as an HTTP header in order to identify the currently logged-in user. That means the frontend application needs to store the user's auth token somewhere. The Problem with localStorage and Normal Cookies Many SPAs and Ne