opennextjs · conico974 · Nov 13, 2025 · Nov 13, 2025 · Nov 13, 2025 · Nov 13, 2025
diff --git a/.changeset/large-pants-press.md b/.changeset/large-pants-press.md
@@ -0,0 +1,5 @@
+---
+"@opennextjs/aws": patch
+---
+
+Fix cache-control header set in middleware being overriden for ISR route
diff --git a/packages/open-next/src/core/routing/util.ts b/packages/open-next/src/core/routing/util.ts
@@ -356,6 +356,11 @@ export async function revalidateIfRequired(
  * @__PURE__
  */
 export function fixISRHeaders(headers: OutgoingHttpHeaders) {
+  const regex = /s-maxage=(\d+)/;
-  const regex = /s-maxage=(\d+)/;
+  const regex = /s-maxage=\d+/;
-  const regex = /s-maxage=(\d+)/;
+  const regex = /s-maxage=\d+/;
+  // We only apply the fix if the cache-control header contains s-maxage
+  if (!headers[CommonHeaders.CACHE_CONTROL]?.match(regex)) {
+    return;
+  }
   if (headers[CommonHeaders.NEXT_CACHE] === "REVALIDATED") {
     headers[CommonHeaders.CACHE_CONTROL] =
       "private, no-cache, no-store, max-age=0, must-revalidate";
@@ -366,7 +371,6 @@ export function fixISRHeaders(headers: OutgoingHttpHeaders) {
     // calculate age
     const age = Math.round((Date.now() - _lastModified) / 1000);
     // extract s-maxage from cache-control
-    const regex = /s-maxage=(\d+)/;
     const cacheControl = headers[CommonHeaders.CACHE_CONTROL];
     debug("cache-control", cacheControl, _lastModified, Date.now());
     if (typeof cacheControl !== "string") return;

diff --git a/packages/open-next/src/http/openNextResponse.ts b/packages/open-next/src/http/openNextResponse.ts
@@ -22,6 +22,7 @@ export class OpenNextNodeResponse extends Transform implements ServerResponse {
   headers: OutgoingHttpHeaders = {};
   headersSent = false;
   _chunks: Buffer[] = [];
+  headersAlreadyFixed = false;
 
   private _cookies: string[] = [];
   private responseStream?: Writable;
@@ -69,7 +70,7 @@ export class OpenNextNodeResponse extends Transform implements ServerResponse {
   }
 
   constructor(
-    private fixHeaders: (headers: OutgoingHttpHeaders) => void,
+    private fixHeadersFn: (headers: OutgoingHttpHeaders) => void,
     private onEnd: (headers: OutgoingHttpHeaders) => Promise<void>,
     private streamCreator?: StreamCreator,
     private initialHeaders?: OutgoingHttpHeaders,
@@ -271,6 +272,14 @@ export class OpenNextNodeResponse extends Transform implements ServerResponse {
    * OpenNext specific method
    */
 
+  fixHeaders(headers: OutgoingHttpHeaders) {
+    if (this.headersAlreadyFixed) {
+      return;
+    }
+    this.fixHeadersFn(headers);
+    this.headersAlreadyFixed = true;
+  }
+
   getFixedHeaders(): OutgoingHttpHeaders {
     // Do we want to apply this on writeHead?
     this.fixHeaders(this.headers);

diff --git a/packages/tests-e2e/tests/appRouter/isr.test.ts b/packages/tests-e2e/tests/appRouter/isr.test.ts
@@ -45,13 +45,26 @@ test("headers", async ({ page }) => {
     return response.status() === 200;
   });
   await page.goto("/isr");
+  let hasBeenStale = false;
+  let hasBeenHit = false;
 
   while (true) {
     const response = await responsePromise;
     const headers = response.headers();
+    expect(headers["cache-control"]).toBe(
+      "max-age=10, stale-while-revalidate=999",
+    );
+    const cacheHeader =
+      headers["x-nextjs-cache"] ?? headers["x-opennext-cache"];
+    if (cacheHeader === "STALE") {
+      hasBeenStale = true;
+    }
+    if (cacheHeader === "HIT") {
+      hasBeenHit = true;
+    }
 
     // this was set in middleware
-    if (headers["cache-control"] === "max-age=10, stale-while-revalidate=999") {
+    if (hasBeenStale && hasBeenHit) {
       break;
     }
     await page.waitForTimeout(1000);

diff --git a/packages/tests-unit/tests/core/routing/util.test.ts b/packages/tests-unit/tests/core/routing/util.test.ts
@@ -748,6 +748,7 @@ describe("fixISRHeaders", () => {
   it("should set cache-control directive to must-revalidate when x-nextjs-cache is REVALIDATED", () => {
     const headers: Record<string, string> = {
       "x-nextjs-cache": "REVALIDATED",
+      "cache-control": "s-maxage=10, stale-while-revalidate=86400",
     };
     fixISRHeaders(headers);
 
@@ -771,13 +772,33 @@ describe("fixISRHeaders", () => {
   it("should set cache-control directive to stale-while-revalidate when x-nextjs-cache is STALE", () => {
     const headers: Record<string, string> = {
       "x-nextjs-cache": "STALE",
+      "cache-control": "s-maxage=86400", // 1 day
     };
     fixISRHeaders(headers);
 
     expect(headers["cache-control"]).toBe(
       "s-maxage=2, stale-while-revalidate=2592000",
     );
   });
+
+  it("should not modify cache-control when cache-control is missing", () => {
+    const headers: Record<string, string> = {
+      "x-nextjs-cache": "HIT",
+    };
+    fixISRHeaders(headers);
+
+    expect(headers["cache-control"]).toBeUndefined();
+  });
+
+  it("should not modify cache-control when cache-control has no s-maxage", () => {
+    const headers: Record<string, string> = {
+      "x-nextjs-cache": "HIT",
+      "cache-control": "private, max-age=0",
+    };
+    fixISRHeaders(headers);
+
+    expect(headers["cache-control"]).toBe("private, max-age=0");
+  });
 });
 
 describe("invalidateCDNOnRequest", () => {