AWS Amplify supports HttpOnly cookies for server-rendered Next.js applications
News
AWS Amplify has introduced HttpOnly cookie support for server-rendered Next.js applications using Amazon Cognito's Managed Login.
- Adds HttpOnly cookie attribute for enhanced security
- Protects against cross-site scripting (XSS) attacks
- Prevents client-side JavaScript from accessing cookie contents
- Ensures sensitive authentication tokens remain secure
- Requires request to flow through server before accessing services
- Available in all AWS regions supporting Amplify and Cognito
This feature provides an additional security layer for web applications by restricting direct client-side access to authentication cookies.
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
Sep 9
2024
2024
How to Build Next.js Apps with Authentication using AWS Amplify and Auth0
Feb 18
2025
2025
Amplify Hosting announces support for IAM roles for server-side rendered (SSR) applications
Feb 29
2024
2024
Deploy Next.js 14 SSR apps with AWS Amplify Hosting’s Amazon Linux 2023 Support
Jan 28
2025
2025
AWS Amplify now supports using the TypeScript Data client in server-side AWS Lambda functions
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.