iron-session
iron-session is a secure, stateless (stateless) and cookie-based session library for JavaScript and Next.js based applications. Oturum data is stored in signed and encrypted cookies that are resolved on the server side without requiring a network connection. With version 9, the library has become ESM-oriented and requires Node.js 22.13 or later.
vvo · Authentication & Identity
Common commercial products in this category: Auth0, Okta, AWS Cognito
- You store Oturum data without status in encrypted cookies.
- You manage session data by decoding cookies in the server code.
- You verify Oturum data and update session configurations.
- • NeutralGitHub Issue
Roadmap v8
“### Highlights * Support for Next.js App Dir (Routes + RSC) * Cleaner API (wrappers are removed) * Fully framework agnostic (no /next, /edge, /express sub-exports) * Supports Node.js, Deno and Bun * Better TS support (uses generics instead of module augmentation) * More clear…”
- ↑ PositiveGitHub Issue
Using iron-session with Next.js 12 middlewares
“**Update from maintainer:** If you want to use iron-session in middlewares then follow this solution: --- Hey there! First of all, thanks for the amazing work you do on this library. I'm in the process of converting a Nextjs app to Next 12 and I would like to use middlewares,…”