7 solution docs
Clerk solution docs
Hosted auth with prebuilt sign-in UI in your design's colours and a user sync webhook.
Pick Clerk and all 7 land in docs/solutions/clerk/, next to the rules and skills that reference them.
Every Clerk doc in the registry
Tags: admin · api · authorization · clerk · dark-mode · database · design-tokens · idempotency · impersonation · local-development · matcher · middleware · nextjs · performance · proxy · publicmetadata · roles · route-handlers · security · svix · testing · theming · user-sync · webhooks
Clerk impersonation, the act claim, and what to lock while it is on
When an admin signs in as a user from the Clerk dashboard, the session token carries an act claim. Read it on the server, show a banner, and refuse account changes until it ends.
clerk · impersonation · admin · security
Protecting route handlers is not the same as protecting pages
A redirect is the right answer for a page and a terrible answer for fetch. Use 401 and 403 in route handlers, and never let the proxy be the only check.
clerk · nextjs · route-handlers · authorization
Clerk roles: publicMetadata or your own table?
publicMetadata is free and instant but vendor state you cannot join on. A local roles table joins and audits but must be kept in sync. Pick per what you need to query.
clerk · roles · authorization · publicmetadata
Make Clerk's sign-in look native, in light and dark, with CSS variables
Point Clerk's appearance variables at your design's CSS custom properties so the prebuilt components follow your theme and your dark mode, with no copied hex values.
clerk · nextjs · theming · dark-mode
Testing a Clerk webhook locally without a tunnel round trip
Sign the payload yourself and POST it at localhost. You get replays, retry ids and bad-signature cases in one second instead of thirty.
clerk · webhooks · svix · local-development
The proxy matcher that also matches your static assets
A matcher like "/(.*)" runs auth on every CSS file, image and font. The symptoms are an unstyled site, a redirect loop, or a surprising invocation bill.
clerk · nextjs · proxy · middleware
Clerk user-sync webhooks: duplicates, retries and out-of-order events
Svix retries and can deliver twice, and updates can arrive before creates. Make the write idempotent on the user id and reject stale payloads by timestamp.
clerk · webhooks · svix · idempotency