Observed Signal · Jul 30, 2026 · Technical Release · Source: DEV Community · Impact: 2/5 · Sentiment: Positive
Identity Market: Single-Provider Auth for White-Label SaaS
A developer building VoiceDash, a white-label platform for agencies reselling AI voice agents, describes solving multi-tenant authentication by using one auth provider with a small discriminator field (`type` = "agency" or "client"). The approach bakes the discriminator into JWT sessions, enforces access via a single Next.js middleware gate, and avoids duplicating auth logic. The author also documents an edge-runtime gotcha: edge middleware cannot import Node-only libraries like bcrypt or Prisma, so the solution is to split configuration into an edge-safe auth.config.ts and a server-only auth.ts that includes database-dependent providers.
Provides a practical, reusable multi-tenant authentication pattern and highlights an important edge-runtime limitation; useful for SaaS engineers but not industry-shifting.
Key Takeaways & Evidence Grounding
- VoiceDash is a white-label platform where agencies resell AI voice agents to their clients under their own brand.
- The author implemented a single CredentialsProvider with a discriminator `type` field ("agency" or "client") to serve two distinct user classes from one auth system.
- The discriminator is written into JWT sessions (token) and read on every request so tenant boundaries are enforced from the signed token, not client-supplied data.
- A single Next.js middleware file (`proxy.ts`) enforces route-level access by checking `session.type` and redirecting unauthorized users.
- Edge runtime middleware cannot import Node-only libraries like bcrypt or Prisma, so the solution is to keep an edge-safe auth.config.ts (no providers) and a separate server-side auth.ts that adds the real providers.
Connected Companies & Entities
2 Entities mappedPrisma
Developer database tooling and managed data infrastructure platform.
“let clientMember = await prisma.clientMember.findUnique({ where: { loginId }, include: { user: true, client: { include: { workspace: true } ...”
Vercel
Frontend cloud platform for deploying and scaling modern web applications.
“In this version of Next.js the middleware file is `proxy.ts`, and it is the single gate every request passes through:...”
Ontology Mapping & Concepts
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.