feat(nextjs): add firebase-cookie-middleware with security hardening#739

Open

tyler-reitz wants to merge 15 commits into

FirebaseExtended:mainfrom

tyler-reitz:feat/nextjs-middleware

Commits on Jul 16, 2026

Commits on Jul 17, 2026

fix(nextjs): wrap proxy and refresh json() calls in try/catch, replace throw with logout
tyler-reitz
committed
fix(nextjs): add import condition to exports map, emit type declarations
tyler-reitz
committed

Commits on Jul 20, 2026

fix(nextjs): guard refresh path against unsigned emulator credentials
tyler-reitz
committed
docs(nextjs): fix SameSite doc for ID token cookie
tyler-reitz
committed
fix(nextjs): clamp JWKS Cache-Control max-age to prevent unbounded caching
tyler-reitz
committed

Commits on Jul 21, 2026

fix(v5): import useSyncExternalStore from react, drop polyfill shim
tyler-reitz
committed