Middleware Route Protection

Check auth once, protect routes declaratively.

When to Use This Skill

• Need to protect multiple routes
• Want centralized auth checking
• Tired of repeating auth logic in every route
• Need role-based access control

Core Concepts

1. Middleware intercepts - All requests pass through middleware
2. Declarative routes - Define protected/public routes in config
3. Session refresh - Keep sessions alive automatically
4. Consistent errors - API routes get JSON, pages get redirects

TypeScript Implementation