you can check if the user is logged in for example to be able to view the page. If he's logged in, you can show him the page. If he's not, then redirect him to the login page.

That system works the best when using it with middleware

don't you have a login page?

He may have a system kind of like what we use at our company where we protect our apps behind Google IAP, but then we also verify those headers automatically (using a custom next auth provider) when the user signs in

In our case, the "sign in" page is just the / page for the website, which checks if the user has a session, and then if they don't, it automatically hits a server action to authorize them

And then we have middleware that redirects to that page if no session is found as well

... it automatically hits a server action to authorize them

Why don't you do the same for a secure page?

Like instead of middleware that redirects to the index page?

Or are you saying just check the headers on middleware?

yes, checking the headers in middleware and if they are not present, then authorize them

Fantastic point, I should have mentioned that we also take those headers and call an internal company endpoint to get additional data about that employee from our employees DB, and double check if they're on probation, get roles, etc

So unfortunately can't just do the headers, it's kind of a double process of check headers, get internal data, and then attach relevant info to the session

but if we didn't have that step, only using middleware would be the way to go all day

I can post a rough example of how we do it here if that'd be helpful @Pavement ant

@Pavement ant@Luke are you working for the same company?

Haha, I don't think so, that'd be a crazy coincidence though

haha alright. I guess that's to confusing for me

Hahaha, I'll post try and put a basic demo on github

It's definitely a little bit contrived, feels weird using a custom credentials provider without any actual credentials

But it works great 😂 we've been using it on prod for awhile and no issues...