Arcjet helps developers protect their apps in just a few lines of code. Bot detection. Rate limiting. Email validation. Attack protection. Data redaction. A developer-first approach to security.
This is an example Next.js application demonstrating the use of multiple features. It is deployed at https://example.arcjet.com.
- # form protection uses Arcjet's server-side email verification configured to block disposable providers and ensure that the domain has a valid MX record. It also includes rate limiting and bot protection to prevent automated abuse.
- Bot protection shows how a page can be protected from automated clients.
- Rate limiting shows the use of different rate limit configurations depending on the authenticated user. A logged-in user can make more requests than an anonymous user.
- Attack protection demonstrates Arcjet Shield, which detects suspicious behavior, such as SQL injection and cross-site scripting attacks.
- Sensitive info protects against clients sending you sensitive information such as PII that you do not wish to handle.
-
Install dependencies:
npm ci-
Rename
.env.local.exampleto.env.localand add your Arcjet key. If you want to test the rate limiting authentication, you will also need to add an Auth.js secret and create a GitHub OAuth app. -
Start the dev server
npm run dev- Open http://localhost:3000 in your browser.
Check out the docs, contact support, or join our Discord server.
- Auth: Auth.js
- App: Next.js
- UI: shadcn/ui
- Form handling: React Hook Form (see also our full form protection example)
- Client-side validation: Zod
- Security: Arcjet