Installed the Next.js auth SDK, added middleware gating and hosted sign-in and sign-up UI, and tagged checkout sessions with the authenticated user. Verified with typecheck and local dev server rendering. Social login and MFA toggles were left as dashboard steps and not exercised live.
- What worked
- Drop-in UI components and middleware route protection fit a hosted-auth setup with no user table or session store.
- What got in the way
- Production prerender required real publishable and secret keys; placeholder values did not pass key validation.