clerk-prod-checklist

# Clerk Production Checklist ## Overview Complete checklist to ensure your Clerk integration is production-ready. Covers environment config, security hardening, monitoring, error handling, and compliance. ## Prerequisites - Clerk integration working in development - Production environment and domain configured - CI/CD pipeline ready ## Instructions ### Step 1: Environment Configuration Checklist | Check | Status | Action | |-------|--------|--------| | Using `pk_live_` keys | [ ] | Switch from test to live keys | | `CLERK_SECRET_KEY` is `sk_live_` | [ ] | Never use test keys in production | | `.env.local` in `.gitignore` | [ ] | Prevent accidental secret commits | | `CLERK_WEBHOOK_SECRET` set | [ ] | Required for webhook verification | | Production domain in Clerk Dashboard | [ ] | Dashboard > Domains | | Sign-in/sign-up URLs configured | [ ] | Set `NEXT_PUBLIC_CLERK_SIGN_IN_URL` etc. | ### Step 2: Validation Script ```typescript // scripts/prod-readiness.ts import { createClerkClient } from '@clerk/backend' async function validateProduction() { const checks: { name: string; pass: boolean; detail: string }[] = [] // 1. Live keys check const pk = process.env.NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY || '' const sk = process.env.CLERK_SECRET_KEY || '' checks.push({ name: 'Live publishable key', pass: pk.startsWith('pk_live_'), detail: pk.startsWith('pk_live_') ? 'Using live key' : `Using ${pk.slice(0, 8)}... (should be pk_live_)`, }) checks.push({ ...