Next-auth middleware is not checking the JWT callback?

[bymoe]

If I have a JWT callback with refresh token rotation set up & middleware implemented as simple as this:

export { default } from "next-auth/middleware";
export const config = {
  matcher: ["/plans"],
};

The problem is when I go to /plans route I should expect the session to be populated on this SSR page from the middleware? And I should expect the JWT callback to be called inside this middleware. but instead; IT IS NOT.

The jwt callback is not called in the middleware before accessing the page so therefore no token expiration check been checked ? So I cannot see how using the middleware is better than unstable_getserversession ?

I just want to be able to populate the session server-side (therefore token expiration check on server) for all my SSR pages; why is that hard to do?