How does the createMiddleware function work with parsedInput?

[palmmymumu]

For example, in a case where you need to check if ctx.user.userId has permission to access the data of the payment specified in parsedInput.payId, and return next({ ctx: { payment } }). to next action

[TheEdoRan]

The next function returns an object with information about the action execution. If you await it, you'll see that it returns parsedInput, you can then access parsedInput.payId and then return the result to complete the execution, or stop it there.

You can see an example in the middleware page of the docs, by looking at the logging one.

[palmmymumu]

I'm creating middleware guard to protect resources from being access/edit/execution, If I await next() for parsedInput will it already been executed? (e.g. in case of editing protected data)

[TheEdoRan]

If I await next() for parsedInput will it already been executed?

Yep, so not suitable. You can instead check the clientInput (middleware argument) to process the payId. This is unparsed data though, because in next-safe-action input/output validation is performed after middleware functions.