I'm creating a website and using a 3rd party service that allows users to authenticate themselves. Once they are authenticated, this service stores a sessionID in the user's local storage. In addition, I have a _middleware.ts file that I would like to use to protect certain routes (i.e., only certain users should be able to access '/protected').

Now, I'm wondering if it's possible to automatically include this sessionID (that is in the user's local storage) for every page request that their browser sends to the server (or if this is possible, on only the requests that are for protected.tsx)? That way, if a user gets routed to '/protected', the _middleware.ts file will take a look at the request, verify that the sessionID is valid and whitelisted to access the page, and the respond with the protected.tsx page (or redirect them if they don't have the right permissions).

If anyone knows how to do this (or knows specific downsides to this approach), would love the help!