Middleware compared request.nextUrl.pathname (basePath already stripped by Next.js) against paths still prefixed with /shop, so /shop/admin pages loaded without server-side auth protection. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Description
No description provided
Languages
TypeScript
52.8%
JavaScript
21%
HTML
11.2%
CSS
7.9%
Shell
6.5%
Other
0.6%