clerk-tanstack-patterns

Protect TanStack React Start routes by registering clerkMiddleware in your start.ts file and adding beforeLoad guards that call server-side auth, throwing redirects to /sign-in for unauthenticated users.

Secure TanStack Start server functions by using createServerFn with Clerk auth checks, returning user context for loaders and components to ensure unauthenticated access is denied before runtime execution.

Yes, Clerk middleware works with Vinxi and TanStack Start by registering clerkMiddleware in start.ts, which propagates auth context to loaders and API routes for server-side protection.

The best way to protect a dashboard layout is using a beforeLoad guard with Clerk auth that throws redirects for unauthenticated users, allowing child routes to inherit authentication without repeating checks.

TanStack Start routes leak protected data without auth guards because server functions and loaders execute without authentication checks, requiring beforeLoad guards that throw redirects or return 401 to prevent access.