We chose buddy, and we're happy with it

@U0P7ZBZCK do you have it thread in the middleware or where did you place it? I’m looking at some of their examples and trying to figure out where it would fit

(defn- auth-required?
  [segment]
  ;; `accounts` and `static` are used to render the signin page, and `sessions`
  ;; is the API endpoint used to authenticate users and create sessions.
  (not-in? segment ["accounts" "static" "sessions"]))

(defn- check-auth-required
  [handler]
  (fn [request]
    (let [segment (nth (str/split (:uri request) #"/" 3) 1)]
      (if (and (auth-required? segment) (not (authenticated? request)))
        (if (in? segment ["api" "static"])
          (response/unauthorized)
          (response/found (urls/route->url (dr/path-to ui/SignIn))))
        (handler request)))))

(defonce ^:private session-auth-backend (backends/session))

(defn wrap-check-auth-required
  [handler {:keys [session-secret]}]
  (-> handler
      check-auth-required
      (wrap-authentication session-auth-backend)
      (wrap-session {:store (cookie-store {:key (s->bytes session-secret)})
                     :cookie-attrs {:http-only true :same-site :strict}})))

middelware

thanks @U0P7ZBZCK

No problem. I hope it's helpful