Security News
Vite+ Joins the Push to Consolidate JavaScript Tooling
Evan You announces Vite+, a commercial, Rust-powered toolchain built on the Vite ecosystem to unify JavaScript development and fund open source.
By Sarah Gooding - Oct 15, 2025
Introducing Socket Firewall: Free, Proactive Protection for Your Software Supply Chain.Learn More →
@phntms/next-basic-auth
Advanced tools
@phntms/next-basic-auth
Lightweight middleware to add basic-auth protection onto your Next.js site.
next-basic-auth
Lightweight middleware to add basic-auth protection onto your Next.js site.
Introduction
Do you have a site that is still in development or need to protect non production environments? Then this basic library is for you. It allows you to protect all your pages in one go by adding this middleware to your _document template.
Installation
Install this package with npm.
npm i @phntms/next-basic-auth
Usage
import basicAuth from "@phntms/next-basic-auth";
import Document, {
DocumentContext,
Head,
Html,
Main,
NextScript,
} from "next/document";
const authConfig = {
name: "john",
pass: "letmein",
message: "Go away!",
};
export default class MyDocument extends Document {
static async getInitialProps(ctx: DocumentContext) {
await basicAuth(ctx, authConfig);
}
render() {
return (
<Html>
<Head />
<body>
<Main />
<NextScript />
</body>
</Html>
);
}
}
basicAuth Arguments
ctx: Required - TheDocumentContextprovided bygetInitialProps.config: Optional -BasicAuthMiddlewareConfigobject which allows you to change the default configuration.
Configuration
You can override the configuration using these options...
name: The username required for login, defaults toadmin.pass: The password required for login, defaults topassword.realm: The realm used for the basic-auth, defaults tosite.message: The message to show upon unsuccessful login, defaults to401 Access Denied.
FAQs
Lightweight middleware to add basic-auth protection onto your Next.js site.
We found that @phntms/next-basic-auth demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Package last updated on 13 Jun 2021
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Related posts
Security News
Ruby Central Faces Backlash After Publishing Incident Timeline on RubyGems Access Dispute
Ruby Central’s incident report on the RubyGems.org access dispute sparks backlash from former maintainers and renewed debate over project governance.
By Sarah Gooding - Oct 14, 2025
Research
/Security News
Weaponizing Discord for Command and Control Across npm, PyPI, and RubyGems.org
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.
By Olivia Brown - Oct 11, 2025