OptionalauthAdditional authorization parameters applied when redirecting the user to authenticate.
OptionalgroupsA list of group IDs or group names the authenticated user must belong to.
Group membership is evaluated using the configured groupsClaim from the user session.
OptionalgroupsThe name of the claim in the user profile that contains group information. This value is read from the authenticated user's session.
OptionalmatchDetermines how multiple groups are evaluated. When true, the user must belong to all specified groups for authorization to succeed. Otherwise, membership in any one group is sufficient.
OptionalonAlternate Server Component rendered when the user is not authenticated.
If not provided, the default behavior redirects the user to the sign-in flow.
OptionalonAlternate Server Component rendered when the user is authenticated but does not belong to the required groups.
Receives the resolved authenticated user.
OptionalreturnThe URL the user should be returned to after successful authentication.
Defaults to the current request URL.
Options for configuring protectPage() in the App Router.