middleware.example.ts

// Ref: https://next-auth.js.org/configuration/nextjs#advanced-usage

import { NextResponse } from "next/server"
import { NextRequestWithAuth, withAuth } from "next-auth/middleware"

export default withAuth(
  // `withAuth` augments your `Request` with the user's token.
  function middleware(request: NextRequestWithAuth) {
    // console.log(request.nextUrl.pathname)
    // console.log(request.nextauth.token)

    if (request.nextUrl.pathname.startsWith("/extra") && request.nextauth.token?.role !== "admin") {
      return NextResponse.rewrite(new URL("/denied", request.url))
    }

    if (
      request.nextUrl.pathname.startsWith("/client") &&
      request.nextauth.token?.role !== "admin" &&
      request.nextauth.token?.role !== "manager"
    ) {
      return NextResponse.rewrite(new URL("/denied", request.url))
    }
  },
  {
    callbacks: {
      authorized: ({ token }) => !!token, //if true middleware will be executed
    },
  }
)

// Applies next-auth only to matching routes - can be regex
// Ref: https://nextjs.org/docs/app/building-your-application/routing/middleware#matcher
export const config = { matcher: ["/extra", "/client", "/dashboard"] }