${{ values.name }}

A Next.js frontend template that, the moment it is instantiated, builds, deploys, logs a real person in through authentik, and calls a backend with a Bearer token — with nothing hand-edited.

The Next.js server is the BFF. @infra/platform-nextjs-starter supplies the Auth.js configuration, the protected-route middleware and apiFetch; this repository supplies a login and logout affordance, a session-aware header and one example page that reads a backend over in-cluster DNS.

• Stack: Next.js App Router, TypeScript, Tailwind, Auth.js v5, Vitest, Node 22
• The server holds the tokens. The browser holds an encrypted httpOnly cookie, and useUser() returns a CurrentUser and nothing else.

Develop

pnpm install
pnpm dev   # needs a .env.local: OIDC_ISSUER, OIDC_CLIENT_ID, OIDC_CLIENT_SECRET, AUTH_SECRET, AUTH_URL
pnpm test
pnpm build

Docs

TechDocs renders docs/docs/ (see docs/mkdocs.yml for the nav). The authentik blueprint an instance needs lives at docs/docs/authentik.md.