Protected Routes

Summary

Pages or routes that should only be accessible to authenticated (or authorized) users, redirecting everyone else to a login page.

• 1Build a route guard that redirects unauthenticated users to `/login`.
• 2Implement this via middleware in Next.js rather than only client-side checks.
• 3Remember: client-side route protection is a UX nicety — the API must enforce it too.