chris 517e00aeb1 Fix admin auth gap from basePath stripping, add password reveal toggle
Middleware compared request.nextUrl.pathname (basePath already stripped
by Next.js) against paths still prefixed with /shop, so /shop/admin
pages loaded without server-side auth protection.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
2026-08-19 11:27:37 -04:00
..
2026-06-18 11:42:21 -04:00