Unfortunately, that's an anti-pattern here if you are making a request. If you're just checking cookies, then yes that makes sense. The documentation on auth fo

Unfortunately, that's an anti-pattern here if you are making a request. If you're just checking cookies, then yes that makes sense. The documentation on auth for Next.js tries to make this clear, but my feeling is that "middleware" was a bad name and it came off like we were trying to do Express middleware 1:1.