OptionalgroupsA list of group IDs or group names the authenticated user must belong to.
Group membership is evaluated using the configured groupsClaim from the user session.
OptionalgroupsThe name of the claim in the user profile that contains group information. This value is read from the authenticated user's session.
OptionalmatchDetermines how multiple groups are evaluated. When true, the user must belong to all specified groups for authorization to succeed. Otherwise, membership in any one group is sufficient.
OptionalonAlternate API handler invoked when the request is unauthenticated.
OptionalonAlternate API handler invoked when the user is authenticated but does not satisfy the configured group authorization rules.
Options for configuring protectApi() in the Pages Router.