Next Armored

Next Armored is a npm package to secure your Next.Js application with flexibility and ease. Default configurations are based on best practices and security standards.

It’s my first open-source project. The idea is to create a npm package that allows to secure a Next.Js application, without requiring excessive configuration and knowledge of cybersecurity.

The first release is to configure CORS for an API built with Next.Js. It’s a special case, where our API is consumed by a different web front-end than the one produced by the Next app itself, which is on the same domain and therefore applies the SOP (Same-Origin Policy).

For more information, on how to use the package, what are CORS and in which situations to use them, you can read the following article: How to configure CORS for NextJs

For the next releases, I plan to add middlewares to secure other aspects of a Next.Js application, like CSP, security headers, cookies, etc.