02The proxyRefreshes the session, bounces strangers
03The server gateRe-checks role and two-factor on every page
04Postgres row-level securityThe database has the final word
05Posts, testimonials, jobs, redirectsEvery change in the audit log
From the README: a proxy, a server gate and row-level security in Postgres; each layer can deny on its own.
Created
Jun 5, 2026
Last push
Oct 9, 2026
License
MIT
GitHubProduction-grade admin/auth/CMS backend for Next.js (App Router) + Supabase: invite-only auth, TOTP 2FA, role-based Postgres RLS, audit log, and a repeatable CMS resource pattern. A white-labeled study-and-reproduce reference extracted from a real production site.