File size: 2,062 Bytes
5ef6e9d | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 | /**
* Clerk Frontend API Proxy Middleware
*
* Proxies Clerk Frontend API requests through your domain, enabling Clerk
* authentication on custom domains and .replit.app deployments without
* requiring CNAME DNS configuration.
*
* See: https://clerk.com/docs/guides/dashboard/dns-domains/proxy-fapi
*
* IMPORTANT:
* - Only active in production (Clerk proxying doesn't work for dev instances)
* - Must be mounted BEFORE express.json() middleware
*
* Usage in app.ts:
* import { CLERK_PROXY_PATH, clerkProxyMiddleware } from "./middlewares/clerkProxyMiddleware";
* app.use(CLERK_PROXY_PATH, clerkProxyMiddleware());
*/
import { createProxyMiddleware } from "http-proxy-middleware";
import type { RequestHandler } from "express";
const CLERK_FAPI = "https://frontend-api.clerk.dev";
export const CLERK_PROXY_PATH = "/api/__clerk";
export function clerkProxyMiddleware(): RequestHandler {
// Only run proxy in production — Clerk proxying doesn't work for dev instances
if (process.env.NODE_ENV !== "production") {
return (_req, _res, next) => next();
}
const secretKey = process.env.CLERK_SECRET_KEY;
if (!secretKey) {
return (_req, _res, next) => next();
}
return createProxyMiddleware({
target: CLERK_FAPI,
changeOrigin: true,
pathRewrite: (path: string) =>
path.replace(new RegExp(`^${CLERK_PROXY_PATH}`), ""),
on: {
proxyReq: (proxyReq, req) => {
const protocol = req.headers["x-forwarded-proto"] || "https";
const host = req.headers.host || "";
const proxyUrl = `${protocol}://${host}${CLERK_PROXY_PATH}`;
proxyReq.setHeader("Clerk-Proxy-Url", proxyUrl);
proxyReq.setHeader("Clerk-Secret-Key", secretKey);
const xff = req.headers["x-forwarded-for"];
const clientIp =
(Array.isArray(xff) ? xff[0] : xff)?.split(",")[0]?.trim() ||
req.socket?.remoteAddress ||
"";
if (clientIp) {
proxyReq.setHeader("X-Forwarded-For", clientIp);
}
},
},
}) as RequestHandler;
}
|