Yes absolutely, you can use the Ory SDK's `toSession()` function to resolve a Session Cookie (for browsers) or Session Token (for non-browsers, e.g. native mobile apps) to its identity.
We have on the list to add a section about using Next's new middleware feature to protect API routes. Is that something you'd be interested in?
We have on the list to add a section about using Next's new middleware feature to protect API routes. Is that something you'd be interested in?