redirectToSignIn not respecting publishableKey passed to authMiddleware

I'm using a custom env var naming scheme in order to provide env vars at deploy time.
I am able to supply the publishableKey as a parameter to the middleware,

export default authMiddleware({
    publishableKey: process.env.ENV_VAR_NAME,
    async afterAuth(auth, req, evt) {
        if (!auth.isPublicRoute ) {
            if (!auth.userId) {
                // eslint-disable-next-line @typescript-eslint/no-unsafe-return
                return redirectToSignIn({

but when I call redirectToSignIn within afterAuth, I am getting an error:

Server Error
Error: Missing publishableKey. You can get your key at https://dashboard.clerk.com/last-active?path=api-keys.

This error happened while generating the page. Any console logs will be displayed in the terminal window.
Source
src/middleware.ts (45:40) @ afterAuth

  44 | // eslint-disable-next-line @typescript-eslint/no-unsafe-return
> 45 | return redirectToSignIn({
     |                        ^
  46 |     returnBackUrl: ...,
  48 | });

@dcyoung

Hello @dcyoung
It seems that custom environment variables for that use case are not currently supported. Let me take a look and provide you with a workaround.

@dcyoung

Hello @dcyoung
we are iterating over our API to support this case but currently, I would suggest you try to pass the specific env variable if it's possible. If it's not, I think you could use the draft code below.

// helper.ts - edited copy of packages/nextjs/src/server/redirect.ts
import { constants, redirect } from '@clerk/backend';
import { NextResponse } from 'next/server';

export const setHeader = (res: Response, name: string, val: string) => {
    res.headers.set(name, val);
    return res;
};

const redirectAdapter = (url: string) => {
    const res = NextResponse.redirect(url);
    return setHeader(res, constants.Headers.ClerkRedirectTo, 'true');
};

export const { redirectToSignIn, redirectToSignUp } = redirect({
  redirectAdapter,
  signInUrl: '<your value if needed>',
  signUpUrl: '<your value if needed>',
  publishableKey: '<your value if needed>',
});

// middleware.ts
import { customRedirectToSignIn } from './helper.ts'; // file above

authMiddleware({
    afterAuth: (auth: AuthObject, req) => {
      // ....
      return customRedirectToSignIn({ returnBackUrl: req.experimental_clerkUrl.href });
      // ...
    }
});

I will ping you back when a fix or workaround is available.

This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 10 days.

@kevinmitch14

Hello @kevinmitch14,
The #3001 is not related to redirecToSignIn / redirecToSignUp. The PR attempts to fix issues related to the redirects triggered by the authMiddleware() itself, not the helpers.

@dcyoung

Hello @dcyoung ,
We have attempted to solve the current issue in our new major version @clerk/nextjs@v5.0.0-beta.37 (currently in beta). Check the following example:

import { clerkMiddleware } from '@clerk/nextjs/server';

export default clerkMiddleware((auth, request, next)=>{
   if (!auth.userId) {
    return auth().redirectToSignIn();
   }
}, {
  publishableKey: 'env-or-whatever'
});

export const config = {
  matcher: ['/((?!.*\\..*|_next).*)', '/', '/(api|trpc)(.*)'],
};

@dimkl

Hey @dimkl what I've found is that as soon as you pass a custom publishableKey in middleware.
Eg. publishableKey: process.env.CUSTOM_PK_NAME or even hardcoding the publishableKey (publishableKey: "...").

You get the "Error: Missing publishableKey" error. It happens no matter what if you do not use the env variable name NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY.

I think that the environment variables are not read correctly when they are passed in any way other than the default env variable method used in the docs.

NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY="..."
CLERK_SECRET_KEY="..."

Furthermore, if you pass random values directly into the middleware and also have the ENV vars defined, the ENV vars take precedence over the passed values.

// This will still work if you have NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY defined in env vars.
authMiddleware({
  secretKey: "randomvalue",
  publishableKey: "randomvalue",
})

@dcyoung

Hello @dcyoung , We have attempted to solve the current issue in our new major version @clerk/nextjs@v5.0.0-beta.37 (currently in beta). Check the following example:

This still does not work as expected, the same issue persists. Error: @clerk/backend: Missing publishableKey. You can get your key at https://dashboard.clerk.com/last-active?path=api-keys.

If I pass a publishableKey to middleware but also define it as an ENV VAR, it will work because the ENV VAR overrides the passed value. But once I comment out the env var, the issue will come back.

@kevinmitch14

@kevinmitch14 You are correct, there is an issue with the publishableKey and secretKey parameters not being respected. We are looking into this and we will fix the issue with the parameters having priority over the env and avoid raising error when the env are not set for the internal code of the middleware and not for the redirect* helpers.
I would like make clear that the redirectToSignIn() exported helper will not be fixed in the v4 to support the parameters passed to middleware. The helper is deprecated and it's replacement (auth().redirectToSignIn()) will be fixed in v5 version of the @clerk/nextjs package.
The reason is that it requires a breaking change to be fixed, and we can't introduce that in the v4 version.

I've been trying to pass publishableKey to the Express middleware ("@clerk/clerk-sdk-node": "^5.0.0",):


createClerkExpressWithAuth({
  clerkClient: createClerkClient({
    secretKey: 'sk'
  }),
  publishableKey: 'pk',
})

but it always appears as empty string when I debug the source code from Clerk at

javascript/packages/sdk-node/src/clerkExpressWithAuth.ts

Lines 5 to 6 in 83ec173

    
           export const createClerkExpressWithAuth = (createOpts: CreateClerkExpressMiddlewareOptions) => { 
        
             const { clerkClient, secretKey = '', publishableKey = '' } = createOpts;

Despite it reading like it would take it as argument.

I don't know what is going on, but I keep getting the following error because of that:

my-app\node_modules\@clerk\shared\dist\keys.js:81
      throw new Error("Publishable key not valid.");
            ^

Error: Publishable key not valid.

I think this has been fixed, #3001

@nbkhope

@nbkhope This issue related to the @clerk/nextjs package and not to the @clerk/clerk-sdk-node. Could you open a separate GH issue for your case and provide a minimal reproduction repo so we could verify that the issue is valid and investigate and assert the fix more quickly?
@kevinmitch14 the #3001 fixes fixes the issue of respecting the publishableKey parameter passed in the middleware (eg clerkMiddleware) of @clerk/nextjs, it's to the @clerk/clerk-sdk-node.

@nbkhope

@nbkhope I've found a way to make it work.

With environment vars

import "dotenv/config"; // To read env vars

const clerkMiddleware = createClerkExpressWithAuth({
  clerkClient: createClerkClient({
    secretKey: process.env.SECRET_KEY,
    publishableKey: process.env.PUBLISHABLE_KEY,
  }),
});

app.get(
  "/protected",
  clerkMiddleware(),
  (req: WithAuthProp<Request>, res: Response) => {
    res.json(req.auth);
  }
);

Without environment vars

const clerkMiddleware = createClerkExpressWithAuth({
  clerkClient: createClerkClient({
    secretKey: "sk_test_somethingSecret",
    publishableKey: "pk_test_somethingPublishable",
  }),
});

app.get(
  "/protected",
  clerkMiddleware(),
  (req: WithAuthProp<Request>, res: Response) => {
    res.json(req.auth);
  }
);

Simpler version with env vars

// Fixed names, make sure these are not renamed.
CLERK_SECRET_KEY=sk_test_somethingSecret
CLERK_PUBLISHABLE_KEY=pk_test_somethingPublishable

import "dotenv/config";

app.get(
  "/protected",
  ClerkExpressWithAuth(),
  (req: WithAuthProp<Request>, res: Response) => {
    res.json(req.auth);
  }
);

@cenobitedk

@cenobitedk hey thanks for the message. Instead of trying to pass the values with the constructor functions, I ended up letting it automatically detect it as Clerk usually presents in the examples. For that to work, inject my configuration manager values into the required variables into my process.env. Something like the following, before the lines that call ClerkExpressWithAuth:

process.env.CLERK_PUBLISHABLE_KEY = getValueFromSomewhereElseNotInEnvFile();
// ... (repeat for any other necessary variable)

Hi all, this should be addressed in our recent versions. Keys passed to clerkMiddleware() are now respected by auth methods called in your middleware handler. Please see https://clerk.com/docs/references/nextjs/clerk-middleware#dynamic-keys for more information.

import { clerkMiddleware, createRouteMatcher } from "@clerk/nextjs/server";

const isProtectedRoute = createRouteMatcher([
"/dashboard(.)",
"/meetings(.)",
"/availability(.)",
"/events(.)",
]);

export default clerkMiddleware((auth, req) => {
if (!auth().userId && isProtectedRoute(req)) {
// Add custom logic to run before redirecting

return auth().redirectToSignIn();

}
});

export const config = {
matcher: [
// Skip Next.js internals and all static files, unless found in search params
"/((?!_next|[^?]\.(?:html?|css|js(?!on)|jpe?g|webp|png|gif|svg|ttf|woff2?|ico|csv|docx?|xlsx?|zip|webmanifest)).)",
// Always run for API routes
"/(api|trpc)(.*)",
],
};

I am using clerk with Next JD , i am getting the below error while i am trying to redirect from home page to other protected page

TypeError: auth(...).redirectToSignIn is not a function

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

Navigation Menu

Repository navigation

redirectToSignIn not respecting publishableKey passed to authMiddleware #1442

11 remaining items

With environment vars

Without environment vars

Simpler version with env vars

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

	export const createClerkExpressWithAuth = (createOpts: CreateClerkExpressMiddlewareOptions) => {
	const { clerkClient, secretKey = '', publishableKey = '' } = createOpts;

redirectToSignIn not respecting publishableKey passed to authMiddleware #1442

Description

Activity

dimkl commented on Jul 4, 2023

dimkl commented on Jul 5, 2023

clerk-cookie commented on Aug 4, 2023

clerk-cookie commented on Sep 4, 2023

11 remaining items

dimkl commented on Mar 27, 2024

dimkl commented on Mar 27, 2024

kevinmitch14 commented on Mar 27, 2024

kevinmitch14 commented on Mar 27, 2024

dimkl commented on Mar 28, 2024

nbkhope commented on Apr 21, 2024

kevinmitch14 commented on Apr 21, 2024

dimkl commented on May 9, 2024

cenobitedk commented on May 10, 2024

With environment vars

Without environment vars

Simpler version with env vars

nbkhope commented on May 22, 2024

brkalow commented on Oct 15, 2024

Divya70 commented on Nov 3, 2024

clerk-cookie commented on Nov 4, 2025

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions