user-service:8081•Next.js 16 App Router BFF
Secure Identity & User Management For Modern Cloud Services
Enterprise authentication with zero browser secret exposure. Built on HttpOnly cookies, rotating refresh tokens, Web Locks concurrency coordination, and role-based permissions.
HttpOnly Cookie Isolation
JWT access tokens and rotating refresh secrets never touch client-side JavaScript, eliminating XSS credential exposure.
SameSite=Lax • Secure
Single-Flight Refresh
Browser coordinator uses promises and Web Locks to serialize token rotation across multiple tabs, preventing reuse conflicts.
navigator.locks Request
Role-Based Administration
Granular access control supporting ADMIN, SUPER_ADMIN, BUSINESS_OWNER, and standard USER roles with user status management.
Spring Security Integration
Direct Microservice Architecture
Connected to Java User-Service
Next.js acts as the Backend-For-Frontend (BFF), forwarding same-origin browser calls to Java User Service at localhost:8081 with complete token management.