strobes-security/nextjs-vulnerable-appCVE-2025-29927 lab
This is a Next.js application that implements authentication using NextAuth.js. The app features protected routes that require users to be authenticated to access certain pages.
nextjs-auth-app
├── components
│ ├── Layout.js # Layout component for consistent structure
│ ├── Navbar.js # Navigation bar component
│ └── ProtectedRoute.js # Component to protect routes
├── pages
│ ├── _app.js # Custom App component
│ ├── _document.js # Custom Document structure
│ ├── api
│ │ └── auth
│ │ └── [...nextauth].js # NextAuth.js configuration
│ ├── dashboard.js # Protected Dashboard page
│ ├── index.js # Landing page
│ ├── login.js # Login page
│ └── profile.js # User Profile page
├── public # Static assets
├── styles
│ ├── Home.module.css # CSS module for Home component
│ └── globals.css # Global CSS styles
├── utils
│ └── auth.js # Utility functions for authentication
├── .env.local # Environment variables
├── next.config.js # Next.js configuration
├── package.json # npm configuration
└── README.md # Project documentation
To get started with this project, follow these steps:
Clone the repository:
git clone <repository-url>
cd nextjs-auth-app
Install dependencies:
npm install
Set up environment variables:
Create a .env.local file in the root directory and add your environment variables, such as API keys and secrets.
Run the development server:
npm run dev
Open your browser:
Navigate to http://localhost:3000 to view the application.
ProtectedRoute component ensures that only authenticated users can access certain pages like the Dashboard and Profile.If you would like to contribute to this project, please fork the repository and submit a pull request with your changes.
This project is licensed under the MIT License. See the LICENSE file for more details.