feat(backend,nextjs): Machine-to-Machine

[jakobevangelista]

Description

Adds machine to machine. Dx guide here

The spicy changes are in /backend/src/tokens/request.ts and /nextjs/src/server/clerkMiddleware.ts.

The changes to authenticate request adds the MachineAuthenticated and MachineUnauthenticated objects and the logic required.

In nextjs middleware specifically, I check the JWT sub claim in middleware and if it's prefixed with mch_ , pass entity: machine to authenticateRequest. There's a few alternatives but that's the meat and potatoes of this. Discussion here

The changes in the other fullstack frameworks are just to satisfy ts. The primary changes are for /backend and /nextjs.

The backend sdk helper to generate tokens is prefixed with __internal_ because we wanted to initially roll it out internally.

Also unsure about using non null assertions lol

Checklist

• pnpm test runs as expected.
• pnpm build runs as expected.
• (If applicable) JSDoc comments have been added or updated for any package exports
• (If applicable) Documentation has been updated

Type of change

• 🐛 Bug fix
• 🌟 New feature
• 🔨 Breaking change
• 📖 Refactoring / dependency upgrade / documentation
• other:

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
clerk-js-sandbox	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Jan 14, 2025 8:41pm

[changeset-bot]

🦋 Changeset detected

Latest commit: ea44d14

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 10 packages

Name	Type
@clerk/backend	Minor
@clerk/nextjs	Minor
@clerk/astro	Patch
@clerk/express	Patch
@clerk/fastify	Patch
@clerk/nuxt	Patch
@clerk/react-router	Patch
@clerk/remix	Patch
@clerk/tanstack-start	Patch
@clerk/testing	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR