Middleware protection misunderstanding

[gayratv]

I study example:
https://github.com/nextauthjs/next-auth-example

And learn:
app/middleware-example/page.tsx

Inside file only static Html.

The middleware.ts file represents only the matcher that prohibits the middleware from running for a route: api, _next/static, _next/image, favicon.ico

As far as I can understand, all pages except the above mentioned ones should be protected

Ok, I create file app/mw2/page.tsx:
export default function Home() { return (<h1>MW2</h1>); }

but route htpp://localhost:3000/mw2 is unprotected

I found some code in auth.ts:

authorized({ request, auth }) {
      const { pathname } = request.nextUrl
      if (pathname === "/middleware-example") return !!auth
      return true
    },

Please help me to understand how to protect pages with only middleware

[gayratv]

I found solution.
I rewrite middleware.ts - and it's work.

https://github.com/gayratv/next-auth-example