acwi-preview-auth

To set the acwi_preview_session cookie, you post a password to the /api/auth endpoint. This action creates the cookie with a 7-day expiry, enabling access to gated development preview pages like /about and /home.

Cookie-based middleware authentication for development preview areas validates access by checking for a specific session cookie. If unauthenticated, the middleware redirects users away from protected routes to ensure only authorized access.

Next.js middleware redirects unauthenticated users by enforcing cookie gating on protected routes. When the required session cookie is missing, the middleware intercepts the request and redirects the user to the root path.

Yes, you can use this preview auth flow for stakeholder QA reviews in a development environment. It provides a repeatable method to obtain access to internal preview pages without manually navigating security barriers.

The acwi_preview_session cookie lasts for 7 days before expiring. This 7-day expiry is set during cookie creation when the password is posted to the authentication endpoint.