Has anyone used next-auth? Is there a way to get the session with route handlers (GET, POST, UPDATE, DELETE) instead of having all the function requests in one function for protecting API routes? I can't use getServerSession with NextResponse but only with NextApiResponse. Is there any workaround for this?

Reference: https://next-auth.js.org/tutorials/securing-pages-and-api-routes#securing-api-routes