Next.js

Use the framework-neutral Own Auth handler from one App Router catch-all route. Complete the Quickstart first so the shared auth instance and database tables are ready.

For a complete App Router implementation with a client-side sign-in form, protected Server Components, and Server Actions, follow Own Auth with Next.js App Router.

import { createOwnAuthHandler } from "own-auth/http";

import { auth } from "@/auth";

const handler = createOwnAuthHandler(auth);

export const GET = handler;
export const POST = handler;

That route exposes the complete HTTP handler contract under /api/auth.

import { createOwnAuthClient } from "own-auth/client";

export const authClient = createOwnAuthClient();

The handler sets and clears the HttpOnly session cookie. It also validates browser request origins and returns the shared typed error format. No Next.js auth logic is added to the Own Auth core.

If the Next.js frontend calls an auth API on another HTTPS origin, allow that frontend origin in the handler:

const handler = createOwnAuthHandler(auth, {
  trustedOrigins: ["https://app.example.com"],
});

Configure the API's CORS response separately so credentialed browser requests can reach it.