Skip to content
Artwork for The Call Kent Podcast
The Call Kent Podcast · Apr 28, 2025 · 3 min

Securing Routes in React Router Framework

I’m transitioning from SPAs with REST APIs to SSR applications using React Router Framework. While I’ve used layout routes and tools like SWR/React Query for route protection in React Router DOM, I just found out that actions in React Router Framework are still vulnerable to unauthorized POST requests. I use JWT auth with tokens stored in cookies—do I need to verify the JWT in every action on each route, or is there a global solution like Fastify’s onRequest hook? React Router v7.3.0 changelog which introduces middleware support Securing Routes in React Router Framework

0:00-3:30

transcript

No transcript — this publisher did not publish one.

show notes

I’m transitioning from SPAs with REST APIs to SSR applications using React Router Framework. While I’ve used layout routes and tools like SWR/React Query for route protection in React Router DOM, I just found out that actions in React Router Framework are still vulnerable to unauthorized POST requests. I use JWT auth with tokens stored in cookies—do I need to verify the JWT in every action on each route, or is there a global solution like Fastify’s onRequest hook?

Securing Routes in React Router Framework
links2