Protect `/admin`
Lock /admin so anyone who isn't the signed-in owner is sent to /login: checked at the door by proxy.ts, checked again inside the page, and checked again in every admin action.
Why this matters
Right now, /admin is a room with a sign on the door that says "Owner only", and no lock. In Lesson 9.6 that room will hold every customer's name, phone number and order. Before anything private goes in, the lock goes on.
You'll also learn the single most important idea in web security: never rely on one lock. Professional developers check permission in several places, so that one mistake (a typo, a renamed file, a setting someone changed) doesn't open everything. Next.js's own documentation says the same: check who's asking inside each page and action, not only at the door. By the end of this lesson, you'll have proven each lock works on its own.
In the full lesson
- The idea in plain English
- Do it
- Check it worked
- Understand what AI wrote
- Quick check
- What you can do now
The step-by-step, the prompt to copy, the video and the check-it-worked list, for every lesson in all 15 modules. GHS 399 ($40), paid once by mobile money or card, yours to keep.