clerk-core-workflow-b

# Clerk Core Workflow B: Session & Middleware ## Overview Implement session management and route protection with Clerk middleware. Covers `clerkMiddleware()` configuration, `auth()` patterns, custom session claims, JWT templates for external services, organization-scoped sessions, and session token v2. ## Prerequisites - `@clerk/nextjs` installed with ClerkProvider wrapping the app - Next.js 14+ with App Router - Sign-in/sign-up flows working (`clerk-core-workflow-a` completed) ## Instructions ### Step 1: Configure clerkMiddleware with Route Matchers ```typescript // middleware.ts (project root) import { clerkMiddleware, createRouteMatcher } from '@clerk/nextjs/server' const isPublicRoute = createRouteMatcher([ '/', '/sign-in(.*)', '/sign-up(.*)', '/api/webhooks(.*)', '/pricing', '/blog(.*)', ]) const isAdminRoute = createRouteMatcher(['/admin(.*)']) const isApiRoute = createRouteMatcher(['/api(.*)']) export default clerkMiddleware(async (auth, req) => { // Public routes: no auth required if (isPublicRoute(req)) return // Admin routes: require org:admin role if (isAdminRoute(req)) { await auth.protect({ role: 'org:admin' }) return } // All other routes: require authentication await auth.protect() }) export const config = { matcher: [ '/((?!_next|[^?]*\\.(?:html?|css|js(?!on)|jpe?g|webp|png|gif|svg|ttf|woff2?|ico|csv|docx?|xlsx?|zip|webmanifest)).*)', '/(api|trpc)(.*)', ], } ``` **Key behavior:** `clerkMiddleware()` does...