TrueSift Next.js SDK

The official @truesift/next package integrates TrueSift into Next.js App Router applications. The SDK version currently used by TrueSift is 0.3.0.

Installation

pnpm add @truesift/next

Architecture

The integration is split into three clearly separated areas:

1. Browser: TrueSiftCheck performs the visible verification and returns a short-lived verification token.
2. Local challenge and verify routes: the Secret Key remains server-side and is never exposed to the browser.
3. Protected business route: it accepts the token as client input, defines action, path, and origin itself, and executes the protected operation only after successful server-side proof verification.

Security boundary

A browser display or client-reported allow is not proof. The protected route must validate the token server-side against the expected context.

More information

The current interactive SDK presentation and package example are available on the TrueSift SDK page. The package is also published on npm.