Authorization Patterns

Next.js provides unauthorized() for handling authorization in Server Components.

Checking Authorization

import { unauthorized } from 'next/navigation';

export default function DashboardPage() {
  if (!canManagePosts()) {
    unauthorized();
  }
  return <Dashboard />;
}

import { unauthorized } from 'next/navigation';

export default function DashboardPage() {
  if (!canManagePosts()) {
    unauthorized();
  }

The unauthorized.tsx File

From app/dashboard/unauthorized.tsx:

export default function Unauthorized() {
  return (
    <Card className="text-center">
      <CardTitle>Unauthorized</CardTitle>
      <CardDescription

Protecting Server Functions

Always check authorization in actions too:

export async function deletePost(slug: string) {
  if (!canManagePosts()) throw new Error('Unauthorized');
  await prisma.post.delete

Authorization Patterns

Next.js provides unauthorized() for handling authorization in Server Components.

Checking Authorization

import { unauthorized } from 'next/navigation';

export default function DashboardPage() {
  if (!canManagePosts()) {
    unauthorized();
  }
  return <Dashboard />;
}

import { unauthorized } from 'next/navigation';

export default function DashboardPage() {
  if (!canManagePosts()) {
    unauthorized();
  }

The unauthorized.tsx File

From app/dashboard/unauthorized.tsx:

export default function Unauthorized() {
  return (
    <Card className="text-center">
      <CardTitle>Unauthorized</CardTitle>
      <CardDescription

Protecting Server Functions

Always check authorization in actions too:

export async function deletePost(slug: string) {
  if (!canManagePosts()) throw new Error('Unauthorized');
  await prisma.post.delete

Authorization with unauthorized()

Authorization Patterns

Checking Authorization

The unauthorized.tsx File

Protecting Server Functions

Authorization with unauthorized()

Authorization Patterns

Checking Authorization

The unauthorized.tsx File

Protecting Server Functions