Hi, i'm trying to protect everything except one path. I have the following config in middleware.ts

import { withAuth } from "next-auth/middleware";

export default withAuth({
  pages: {
    signIn: "/auth/signin", // this is to force okta auth without showing the button
  },
});

export const config = { matcher: ["/((?!api/applications/add).*)"] };

if i go to /overview then this is protected. But when i go to / then this is not protected. My api/applications/add path is unprotected as expected.

I've tested with pathToRegexp locally with the following code:

const { pathToRegexp, match, parse, compile } = require("path-to-regexp");

const keys = [];
const re = pathToRegexp(["/((?!api/applications/add).*)"], keys);

const match1 = match(re, "/api/applications/add", keys);

console.log(re.test("/api/applications/add"));
console.log(re.test("/overview"));
console.log(re.test("/")); 

The output is

false
true
true

If i set the matcher to

export const config = { matcher: ["/:path*"] };

The root is protected, but of course also /api/applications/add which i don't want.

Please advise?