Why Redirect and rewrite in middleware in NextJS? - Purpose & Use Cases

The Big Idea

Discover how one simple middleware can save you hours of repetitive redirect headaches!

The Scenario

Imagine you have a website where users need to be sent to different pages based on their location or login status. You try to handle this by checking every page manually and writing code in each page to redirect users.

The Problem

This manual approach is slow and messy. You have to repeat the same redirect logic on many pages, making your code hard to maintain. If you forget to add the redirect on one page, users might see wrong content or errors.

The Solution

Using middleware for redirects and rewrites lets you handle these rules in one place. Middleware runs before your pages load, so you can send users to the right page automatically without repeating code everywhere.

Before vs After

✗ Before

if (!userLoggedIn) { window.location.href = '/login'; }

✓ After

import { NextResponse } from 'next/server';

export function middleware(request) {
  if (!request.cookies.get('user')) {
    return NextResponse.redirect(new URL('/login', request.url));
  }
}

What It Enables

This lets you control user flow smoothly and securely, improving user experience and keeping your code clean and easy to update.

Real Life Example

For example, an online store can redirect users from a general homepage to a country-specific page automatically, or send users to login if they try to access their account without signing in.

Key Takeaways

Manual redirects on every page cause repeated code and errors.

Middleware centralizes redirect and rewrite logic before pages load.

This improves site speed, security, and maintainability.

Practice

1. What is the main difference between a redirect and a rewrite in Next.js middleware?

easy

A. Rewrite changes the URL in the browser, redirect does not.

B. Redirect changes the URL in the browser, rewrite does not.

C. Redirect and rewrite both change the URL in the browser.

D. Neither redirect nor rewrite affect the URL in the browser.

Solution

1. Step 1: Understand redirect behavior

   A redirect sends the user to a new URL and updates the browser's address bar to that URL.

2. Step 2: Understand rewrite behavior

   A rewrite changes the content served without changing the URL shown in the browser.

3. Final Answer:

   Redirect changes the URL in the browser, rewrite does not. -> Option B

4. Quick Check:

   Redirect updates URL, rewrite keeps URL same [OK]

Hint: Redirect changes URL; rewrite keeps URL same [OK]

Common Mistakes:

• Thinking rewrite changes browser URL
• Confusing redirect with rewrite
• Assuming both always change URL

2. Which of the following is the correct way to perform a redirect in Next.js middleware?

easy

A. return NextResponse.redirect('/home');

B. return NextResponse.rewrite(new URL('/home', request.url));

C. return NextResponse.next('/home');

D. return NextResponse.redirect(new URL('/home', request.url));

Solution

1. Step 1: Check NextResponse.redirect syntax

   The redirect method requires a full URL object, created with new URL(path, base).

2. Step 2: Validate options

   return NextResponse.redirect(new URL('/home', request.url)); correctly uses new URL with request.url as base. return NextResponse.redirect('/home'); incorrectly passes a string instead of URL object.

3. Final Answer:

   return NextResponse.redirect(new URL('/home', request.url)); -> Option D

4. Quick Check:

   Redirect needs URL object [OK]

Hint: Use new URL(path, request.url) for redirects [OK]

Common Mistakes:

• Passing string directly to redirect
• Using rewrite instead of redirect
• Missing base URL in new URL()

3. Given this middleware code snippet, what will happen when a user visits '/dashboard'?

import { NextResponse } from 'next/server';
export function middleware(request) {
  if (request.nextUrl.pathname === '/dashboard') {
    return NextResponse.rewrite(new URL('/profile', request.url));
  }
  return NextResponse.next();
}

medium

A. User sees content from '/profile' but URL stays '/dashboard'.

B. User is redirected to '/profile' and URL changes.

C. User stays on '/dashboard' with original content.

D. Middleware throws an error due to incorrect syntax.

Solution

1. Step 1: Analyze rewrite usage

   The code uses NextResponse.rewrite to serve '/profile' content when URL is '/dashboard'.

2. Step 2: Understand rewrite effect on URL

   Rewrite changes content served but keeps the browser URL unchanged as '/dashboard'.

3. Final Answer:

   User sees content from '/profile' but URL stays '/dashboard'. -> Option A

4. Quick Check:

   Rewrite changes content, not URL [OK]

Hint: Rewrite serves new content but keeps URL same [OK]

Common Mistakes:

• Confusing rewrite with redirect
• Expecting URL to change on rewrite
• Assuming middleware throws error here

4. Identify the error in this middleware code that tries to redirect users from '/old' to '/new':

import { NextResponse } from 'next/server';
export function middleware(request) {
  if (request.nextUrl.pathname === '/old') {
    return NextResponse.redirect('/new');
  }
  return NextResponse.next();
}

medium

A. The condition should check request.url, not request.nextUrl.pathname.

B. Middleware must be async to use redirect.

C. Redirect requires a full URL object, not a string.

D. NextResponse.next() cannot be returned in middleware.

Solution

1. Step 1: Check redirect argument type

   NextResponse.redirect expects a URL object, not a string path.

2. Step 2: Validate other parts

   Condition and NextResponse.next() usage are correct; async not required here.

3. Final Answer:

   Redirect requires a full URL object, not a string. -> Option C

4. Quick Check:

   Redirect needs URL object, not string [OK]

Hint: Redirect needs new URL(path, request.url) [OK]

Common Mistakes:

• Passing string directly to redirect
• Making middleware async unnecessarily
• Checking wrong request property

5. You want to redirect users to '/login' if they visit any page except '/public' or '/login'. Which middleware code correctly implements this logic?

hard

A. if (!['/public', '/login'].includes(request.nextUrl.pathname)) {
return NextResponse.redirect(new URL('/login', request.url));
}
return NextResponse.next();

B. if (['/public', '/login'].includes(request.nextUrl.pathname)) {
return NextResponse.redirect(new URL('/login', request.url));
}
return NextResponse.next();

C. if (request.nextUrl.pathname !== '/public' || request.nextUrl.pathname !== '/login') {
return NextResponse.redirect(new URL('/login', request.url));
}
return NextResponse.next();

D. if (request.nextUrl.pathname === '/public' && request.nextUrl.pathname === '/login') {
return NextResponse.redirect(new URL('/login', request.url));
}
return NextResponse.next();

Solution

1. Step 1: Understand condition logic

   We want to redirect if the path is NOT '/public' or '/login'. Using !includes checks this correctly.

2. Step 2: Check each option's condition

   if (!['/public', '/login'].includes(request.nextUrl.pathname)) { return NextResponse.redirect(new URL('/login', request.url)); } return NextResponse.next(); correctly uses negation with includes. if (['/public', '/login'].includes(request.nextUrl.pathname)) { return NextResponse.redirect(new URL('/login', request.url)); } return NextResponse.next(); redirects only on '/public' or '/login' which is wrong. Options C and D have logical errors in conditions.

3. Final Answer:

   Option A code correctly redirects except for '/public' and '/login'. -> Option A

4. Quick Check:

   Use !includes for exclusion check [OK]

Hint: Use !includes to exclude paths for redirect [OK]

Common Mistakes:

• Using OR instead of AND in conditions
• Redirecting on allowed paths
• Incorrect logical negation