feat: Add the support of custom cookieName on the next-auth/middleware

docs/docs/configuration/nextjs.md

@@ -67,6 +67,32 @@ See the documentation for the [pages option](/configuration/pages) for more info
 
 ---
 
+### `cookies`
+
+- **Required**: _No_
+
+#### Description
+
+If you are using middleware to protect your routes and you use specific cookies in your NextAuth
+specific cookies in your NextAuth configuration, or you want to use two different tokens for two different
+for two different middlewares, you can specify the cookie in which the token is stored 
+the token.
+
+:::note
+Currently, only the `sessionToken` cookie can be overwritten
+:::
+
+#### Example (default value)
+```js
+cookies: {
+  sessionToken: {
+    name: `__s42.auth-token`,
+  }
+}
+```
+
+---
+
 ### Examples
 
 `withAuth` is very flexible, there are multiple ways to use it.

packages/next-auth/src/next/middleware.ts

@@ -21,6 +21,23 @@ export interface NextAuthMiddlewareOptions {
    * [Documentation](https://next-auth.js.org/configuration/pages)
    */
   pages?: NextAuthOptions["pages"]
+
+  /**
+   * You can override the default cookie names and options for any of the cookies
+   * by this middleware. Similar to `cookies` in `NextAuth`.
+   * 
+   * Useful if the token is stored in not a default cookie.
+   * 
+   * ---
+   * [Documentation](https://next-auth.js.org/configuration/options#cookies)
+   *
+   * - ⚠ **This is an advanced option.** Advanced options are passed the same way as basic options,
+   * but **may have complex implications** or side effects.
+   * You should **try to avoid using advanced options** unless you are very comfortable using them.
+   *
+   */
+  cookies?: Partial<NextAuthOptions["cookies"]>
+
   callbacks?: {
     /**
      * Callback that receives the user's JWT payload
@@ -81,7 +98,7 @@ async function handleMiddleware(
     return NextResponse.redirect(errorUrl)
   }
 
-  const token = await getToken({ req: req as any })
+  const token = await getToken({ req: req as any, cookieName: options?.cookies?.sessionToken?.name })
 
   const isAuthorized =
     (await options?.callbacks?.authorized?.({ req, token })) ?? !!token