TanStack Start Middleware

Select the correct pipeline

Read ../../docs/middleware-and-server-routes.md.

• Use request middleware around incoming HTTP requests and server routes.
• Use server-function middleware around application RPC.
• Use a server route for public APIs, webhooks, health checks, feeds, or custom response formats.

Compose explicitly

Document middleware order and the context each layer adds. Pass typed context through next. Treat any context sent from a client as untrusted and verify it on the server. Keep authorization decisions close to the protected resource.

Register global middleware only for behavior that applies globally. Avoid mutable module state and hidden dependencies between layers.

Implement HTTP contracts

Validate method, params, query, headers, body, and content type as required. Return explicit status, headers, and response bodies. Check file-route uniqueness for dynamic, splat, escaped, pathless-layout, and nested server routes.