Blocking specific routes based on user session

const session = await auth.api.getSession({
    headers: await headers() // you need to pass the headers object.
})