Middleware support for the api

[clayrisser]

I'm trying to get CSRF Protection working. How to get middleware working with the api. For example...

https://hono.dev/docs/middleware/builtin/csrf

[clayrisser]

Perhaps there could be an array of middleware that gets passed to VXRNOptions or even better, a callback hook that enables direct modification of the hono app.

one/packages/vxrn/src/exports/createServer.ts

Line 7 in a4d4aee

export const createProdServer = async (options: VXRNOptions) => {

[natew]

Do you need this in prod and dev? We're thinking of adding an official middleware API, problem is currently in dev mode we don't run Hono. We have a PR for that, shouldn't be too hard, just need to land it.

[clayrisser]

Eventually I will next middleware support in dev and prod. Mostly I'm trying to implement https://authjs.dev/ at the moment. I think I have a decent workaround for it that I will be sharing soon.

[natew]

Looking at this a bit - this would only make sense for SSR routes I assume, right?

Obviously SSG is build-time.

For SPA type routes we actually haven't decided on how loaders should work full yet. I'm leaning towards having them be request-based though like SSR, though perhaps they could be configured.

[natew]

Wups - meant ^ for the other issue

[barziahmed]

Do you need this in prod and dev? We're thinking of adding an official middleware API, problem is currently in dev mode we don't run Hono. We have a PR for that, shouldn't be too hard, just need to land it.

@natew, please do support middleware in both dev and prod environments. It will be needed for CSP, CSRF, optimistic authorization checks, i18n, and many more things.

It might be best to avoid Next.js's failure in middleware, where nextjs app is node runtime and middleware is edge runtime and they don't play well with each other.

[natew]

middleware is here!