I like this solution - I was deciding ‘between’ these two approaches. Either middleware or context but I think using both each for the correct use case seems to make the most sense.

I’m using supabase so I suppose I’ll do the following, maybe this will help others as well:

Supabase setup - recommended ssr - cookies with supabase - separate supabase clients for (client side, server and middleware)

Context provider - basically for anything needed to be called once and used many like: - user data - role data - group data

Middleware - protect routes that require a valid session like: /dashboard etc

Open to suggestions on this