Central vs per-route token validation in Astro middleware for expired credentials
Goal is to enforce least-privilege authentication in an Astro app using documented middleware as the integration point for auth checks, with expired credentials rejected consistently across server-rendered pages and endpoints. Astro has no built-in authentication. Middleware defined in src/middleware.ts runs only for SSR-rendered routes and can validate a se
astro