Security Best Practices

Authentication & Authorization

Session Management with Arctic OAuth

// Always use the validateRequest utility for authentication
import { validateRequest } from "~/utils/auth";

const { user, session } = await validateRequest();
if (!user) {
  throw redirect({ to: "/unauthenticated" });
}

Middleware Protection Patterns

Always protect server functions with appropriate middleware: