# \[Archive\] Securing api routes in NextJs

**URL:** <https://builder.metamask.io/t/archive-securing-api-routes-in-nextjs/2458>\
**Category:** Embedded Wallets (Web3Auth)\
**Created:** [August 26, 2022, 12:04pm UTC](https://builder.metamask.io/t/archive-securing-api-routes-in-nextjs/2458 "2022-08-26T12:04:24Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![githubdiscussions](https://avatars.discourse-cdn.com/v4/letter/g/13edae/32.png) [@githubdiscussions](https://builder.metamask.io/u/githubdiscussions)\
**Post date:** [August 26, 2022, 12:04pm UTC](https://builder.metamask.io/t/archive-securing-api-routes-in-nextjs/2458/1 "2022-08-26T12:04:24Z")

</div>

> **🏛 Archived Content from Web3Auth Community**
> 
> This topic was originally posted by **githubdiscussions** on 8/26/2022.  
> This content has been migrated from our previous community forum to preserve valuable discussions.

* * *

Hi,  
We are using web3auth to authenticate users on our NextJs app. It works well on the client side. What is the best approach to secure api routes on the server? Thanks in advance!

Bill

  
   
 Originally posted by: [billtlee](https://github.com/billtlee)  
   
 Check the discussion at: [https://github.com/orgs/Web3Auth/discussions/492](https://github.com/orgs/Web3Auth/discussions/492)

---

<div class="post-metadata">

**Author:** ![githubdiscussions](https://avatars.discourse-cdn.com/v4/letter/g/13edae/32.png) [@githubdiscussions](https://builder.metamask.io/u/githubdiscussions)\
**Post date:** [August 26, 2022, 5:24pm UTC](https://builder.metamask.io/t/archive-securing-api-routes-in-nextjs/2458/2 "2022-08-26T17:24:15Z")

</div>

You can use the idToken returned by web3auth to secure you backend api endpoints, plz refer to this doc to know more:-  
[https://web3auth.io/docs/server-side-verification/](https://web3auth.io/docs/server-side-verification/)

  
   
 Originally posted by: [himanshuchawla009](https://github.com/himanshuchawla009)