I see. So the middleware part is mentioned here: https://supertokens.io/docs/emailpassword/nextjs/setting-up-backend This middleware adds all the auth APIs (for sign in, sign up, session refresh etc..) to your API which the frontend can call.