About

Imported from jeremylongshore/tons-of-skills-marketplace (plugins/saas-packs/clerk-pack/skills/clerk-core-workflow-b/SKILL.md). Install upstream with npx skills add jeremylongshore/tons-of-skills-marketplace --skill clerk-core-workflow-b. Copyright stays with the author (MIT).

Clerk Core Workflow B: Session & Middleware

Name: clerk-core-workflow-b
Author: jeremylongshore

Overview

Implement session management and route protection with Clerk middleware. Covers clerkMiddleware() configuration, auth() patterns, custom session claims, JWT templates for external services, organization-scoped sessions, and session token v2.

Use when managing user sessions, configuring route protection, or implementing token refresh and custom JWT templates.

Prerequisites

@clerk/nextjs installed with ClerkProvider wrapping the app
Next.js 14+ with App Router (or adapt patterns for your stack)
Working publishable + secret Clerk keys in env

Instructions

Confirm ClerkProvider and env keys are live (see clerk-install-auth / clerk-hello-world).
Configure clerkMiddleware() matcher / public routes for the routes you want open.
Use auth() / currentUser() on protected pages and API routes; fail closed when unauthenticated.
For custom claims or external JWT consumers, configure session token templates carefully (size limits).
For org-scoped apps, bind authorization to org id + role claims, not only user id.
Verify: signed-out user cannot hit protected routes; signed-in user can; org role gates hold.

Deep patterns, JWT templates, and edge cases: session-middleware-deep-dive.md.

Output

Session/middleware configuration enforcing the requested protection rules
Documented JWT/session claim changes when customized
Verification steps for protected vs public routes

Examples

Protect all routes except marketing

User: Protect everything except /, /pricing, and Clerk sign-in routes.
Skill: configures clerkMiddleware publicRoutes / matcher and verifies unauth redirect.

Custom session claim for plan tier

User: Put plan_tier on the session JWT for feature flags.
Skill: configures session token template and validates claim size + read path.

Error Handling

Condition	Response
Route is accidentally public	Fail the verification gate and narrow the matcher before release.
Session claim is absent or stale	Treat the request as unauthorized for the dependent feature and refresh through the supported path.
JWT exceeds consumer limits	Remove nonessential claims; retrieve server-side attributes through an authorized backend.
Organization context is missing	Deny the org-scoped operation and require explicit selection/role validation.

Resources

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/jeremylongshore-tons-of-skills-marketplace-clerk-core-wo-d11fb7/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

jeremylongshore-tons-of-skills-marketplace-clerk-core-wo-d11fb7.ocm.jsonjson

{
  "ocm": "1",
  "id": "jeremylongshore-tons-of-skills-marketplace-clerk-core-wo-d11fb7",
  "kind": "skill",
  "name": "clerk-core-workflow-b",
  "description": "Implement session management and middleware with Clerk. Use when managing user sessions, configuring route protection, or implementing token refresh and custom JWT templates. Trigger with phrases like \"clerk session\", \"clerk middleware\", \"clerk route protection\", \"clerk token\", \"clerk JWT\".",
  "publisher": "jeremylongshore",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "general"
    ],
    "tags": [
      "skill-md",
      "saas",
      "clerk",
      "clerk-core",
      "sessions",
      "middleware",
      "skills-sh"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Implement session management and middleware with Clerk. Use when managing user sessions, configuring route protection, or implementing token refresh and custom JWT templates. Trigger with phrases like \"clerk session\", \"clerk middleware\", \"clerk route protection\", \"clerk token\", \"clerk JWT\"."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "skills.sh",
      "repository": "https://github.com/jeremylongshore/tons-of-skills-marketplace",
      "path": "plugins/saas-packs/clerk-pack/skills/clerk-core-workflow-b/SKILL.md",
      "ref": "HEAD",
      "url": "https://github.com/jeremylongshore/tons-of-skills-marketplace/blob/HEAD/plugins/saas-packs/clerk-pack/skills/clerk-core-workflow-b/SKILL.md",
      "key": "jeremylongshore/tons-of-skills-marketplace/plugins/saas-packs/clerk-pack/skills/clerk-core-workflow-b/SKILL.md"
    },
    "compatibility": "Designed for Claude Code",
    "allowed_tools": [
      "Read,",
      "Write,",
      "Edit,",
      "Grep"
    ],
    "license": "MIT"
  },
  "instructions": "# Clerk Core Workflow B: Session & Middleware\n\n## Overview\n\nImplement session management and route protection with Clerk middleware. Covers\n`clerkMiddleware()` configuration, `auth()` patterns, custom session claims, JWT\ntemplates for external services, organization-scoped sessions, and session token v2.\n\nUse when managing user sessions, configuring route protection, or implementing\ntoken refresh and custom JWT templates.\n\n## Prerequisites\n\n- `@clerk/nextjs` installed with ClerkProvider wrapping the app\n- Next.js 14+ with App Router (or adapt patterns for your stack)\n- Working publishable + se",
  "cost": {
    "context_tokens": 693
  }
}

Fetch it by URL: GET /api/v1/registry/jeremylongshore-tons-of-skills-marketplace-clerk-core-wo-d11fb7/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.