React Js, Next Js Technology Upgradation (R&D)

1. Technology Stack
Framework: Next.js 15 (App Router)
State Management: TanStack Query (React Query) v5
Session Management: iron-session (Encrypted, HTTP-only cookies)

implemented a secure, server-side session strategy to separate sensitive tokens from the client browser.

Middleware (

middleware.ts
): Handles global session initialization and persistence using iron-session. It assigns a unique sessionId to every visitor (Guest or User).
Token Store (

src/lib/token-store.ts
): An in-memory store that maps the sessionId (cookie) to the actual JWT Access/Refresh tokens. This ensures JWTs are never exposed to the client-side JavaScript (XSS protection).
Server Actions (

src/actions/auth-actions.ts
): Handles secure operations like

login
, token refresh, and guest recovery.
Resilience: Implemented logic to auto-recover Guest sessions if the server restarts (RAM cache cleared) but the browser still holds a valid cookie.