Protect your Next.js application with secure headers.
- [npm package (`@nosecone/next`)](https://www.npmjs.com/package/@nosecone/next)
- [GitHub source code (`nosecone-next/` in `arcjet/arcjet-js`)](https://github.com/arcjet/arcjet-js/tree/main/nosecone-next)
## Installation
```shell
npm install -S @nosecone/next
```
## Example
Create a `middleware.ts` file with the contents:
```ts
import { createMiddleware } from "@nosecone/next";
export const config = {
// matcher tells Next.js to run middleware on all routes
matcher: ["/(.*)"],
};
export default createMiddleware();
```
Add `await connection()` in your `app/layout.tsx` file:
```diff
+ import { connection } from "next/server";
export default async function RootLayout({
children,
}: {
children: React.ReactNode;
}) {
+ // Opt-out of static generation for every page so the CSP nonce can be applied
+ await connection()
return (
{children}
);
}
```
## License
Licensed under the [Apache License, Version 2.0][apache-license].
[apache-license]: http://www.apache.org/licenses/LICENSE-2.0
