For Next App Router middleware, are we supposed to just use the unseal/seal data methods?

[jordanpurinton]

I get errors when calling save and destroy methods directly in Next middleware. Are we supposed to just use the seal methods in there and modify the cookies using the request/response objects? If so, can that be better called out in the docs?

[vvo]

Hey @jordanpurinton, no it's not supposed to error. But it's true I only tested reading the session in a middleware, not writing the session. What are the errors you're getting?

[jordanpurinton]

I get errors relating to the fact that you can't write cookies using the next package unless you're in a server action or router handler

[mcl-laura]

I was calling seal/unseal myself from middleware because getIronSession call returned empty or errors. And that ended up requiring me to install iron-session/edge but after I did that, I still ended up with bad Hmac value error from Hapi-iron.

Are we able to use iron-session in nextJs middleware? But I am using the Pages Router... would this not work at all? Thank you! (iron-session v8.0.1

[vvo]

Hey there you can use the normal getIronSession in middleware, as seen here: https://github.com/vvo/iron-session/blob/main/examples/next/src/middleware.ts