The brief
Most student projects leak private pages to logged-out users. Today you'll fix that properly instead of hiding a button and calling it done.
What to build
- Create a <ProtectedRoute> (or middleware, if you're on Next.js) that checks auth state before rendering a page
- Redirect unauthenticated users to /login and remember where they were headed
- Add one loading state so the page doesn't flash private content for a frame
- Write a 3-line note in your README on the approach you chose and why
Helpful, not required
Submit your proof
Both links go public on your ABTalks profile — this is what keeps the streak honest.