Authentication Across Domains/Subdomains

[shashankbhat2]

First of all, Thank you Vercel for providing such an amazing starter kit!
I am trying to build a multi-tenant app builder and I wanted to see if there is a way to add session based authentication to the [domain].

[steven-tey]

We have a template for cross-subdomain authentication: https://vercel.com/templates/next.js/subdomains-auth

But AFAIK it's not possible to do this for different custom domains due to security reasons!

Will convert this to a discussion to see if anyone else has any ideas!

[bradledford]

@steven-tey any thoughts on how to get the same user store available to the desired https://[site-domain].[root-domain] endpoints where the Posts are rendered? Given the cross-domain restrictions, would it be wiser to abandon this idea and just go with https://[site-domain].app.[root-domain] as seems to be suggested by the template last mentioned at https://vercel.com/templates/next.js/subdomains-auth ?

[MatteoGauthier]

Hey ! Does someone find a solution to this question ?

[ZainKhalidOfficial]

Yes!

(1)
Clerk auth allows it but it's implementation will be quite a challenge.
You'll face some challenge with the middleware which you can resolve as follows: https://stackoverflow.com/questions/77489229/nextjs-multi-tenant-middleware-with-clerk-auth-middleware/77804329#77804329

(2)
I opted for a custom JWT cookie based authentication solution which enabled me to keep the next-auth part and my own auth for the sub-users.
Here is a tutorial for custom auth if you need it: https://www.youtube.com/watch?v=2RxaJrltJKo