The admin API key and tokens must never reach the browser.
Built a catch-all /api/admin-proxy route that reads the HTTP-only session cookie on the server and adds the API key and Bearer token.
Case Study
Web
XXXIII Admin
XXXIII Admin is an internal Next.js dashboard for managing the whole TURN / XXXIII ecosystem. Admins can write and publish Lines, control the sequence and routing logic, manage Directions, pricing and invitation codes, monitor participants and contributions, and track every change through an audit log.
Next.js
Cookie-based Session Management
Challenges & solutions
The technical problems our team solved to ship a reliable, unified web experience.
The panel started as an HTML mockup backed by a localStorage mock database.
Separated the data layer behind a central API client, so screens moved to the real backend without UI rewrites.
Editors must not be able to publish, and signed-out users must not reach any admin screen.
Used Next.js proxy/middleware for redirects plus role checks in the UI and the backend.
Lists and detail views showed stale data after edits.
Used SWR with cache revalidation after each change, so every screen stays in sync.
The participant and audit-log lists grow quickly.
Built a reusable paginated DataTable component with server-side pagination and filtering.
Key features
What users get in the finished, shipped product.
Role-Based Admin Access :
- Authentication : Provides secure administrator login with role-based permission levels.
- Roles : Supports Publisher and Editor roles with distinct access permissions.
- Security : Implements protected routes, session cookies, and automatic redirects for access control.
Dashboard Overview :
- Metrics : Displays key operational metrics through summary tiles.
- Analytics : Provides participant and contribution statistics at a glance.
Line Library :
- Content Management : Allows administrators to create, edit, and view authored Lines.
- Status Tracking : Displays status badges to identify the current state of each Line.
- Publishing : Supports a structured workflow for reviewing and publishing content.
Sequence Placement :
- Ordering : Controls the sequence in which Lines are delivered to participants.
- Placement : Provides tools to manage and organize Line positions within the experience.
Advance / Hold Routing :
- Routing Rules : Manages the logic that determines how participants progress through the experience.
- Rule Details : Provides individual rule views for inspecting routing configurations.
- Editing : Allows administrators to modify routing rules and control progression behavior.
Directions Management :
- Management : Enables administrators to create and edit contribution Directions.
- Status Control : Supports status updates to manage the availability of each Direction.
Access and Pricing :
- Tier Configuration : Manages membership tiers and their associated entitlements.
- Pricing : Provides controls for configuring and maintaining tier-based pricing.
Ballot and Invitation Codes :
- Code Generation : Enables administrators to generate codes for controlled platform access.
- Redemption Tracking : Monitors code redemption activity to support onboarding oversight.
Participants and Contributions :
- Participant Management : Provides participant lists and detailed individual records.
- Payment Monitoring : Displays contribution records for tracking payment activity.
- Data Navigation : Uses paginated data tables to efficiently browse large datasets.
Audit Log :
- Activity Tracking : Records every create, update, and delete action performed within the admin platform.
- Accountability : Captures the administrator responsible for each action and its timestamp.
- Change History : Stores change details to provide traceability and support administrative reviews.
Tech integrations
Third-party SDKs & libraries
2 core integrations powered
Node.js / Express Admin API
Core system integration
Server-side API Proxy
Core system integration
More Case Studies
Related Work
Similar Projects We've Built
Lead CRM Admin – Multi-Tenant SaaS Administration & Back-Office Portal
Lead CRM Admin is an enterprise-grade administration and back-office portal designed for the Lead CRM SaaS ecosystem. It allows Super Admins and Platform Operators to onboard and manage multi-tenant organizations, administer customer and internal staff accounts, configure granular Role-Based Access Control (RBAC), and manage the full billing lifecycle including plans, invoices, and payment receipts. The platform also provides native integrations with third-party lead sources (IndiaMART, Justdial, Meta), client-side PDF document generation.
FlutterGetX+2
View Case Study
CodeX Lead CRM – Enterprise B2B Sales, Lead & Revenue Management Platform
CodeX Lead CRM is a cloud-based sales automation platform and Progressive Web Application (PWA) built for high-velocity sales teams and B2B enterprises. The platform unifies multi-channel lead ingestion (IndiaMART, Justdial, and Meta/Facebook Ads) into a centralized workspace, featuring drag-and-drop pipeline tracking, deal closing, quotation and receipt generation, shared team calendars, and executive business analytics. It features enterprise-grade multi-tenancy, granular role-based access control (RBAC), and security audit tracking.
Next.jsTailwind CSS+2
View Case Study
XXXIII
XXXIII is a Next.js web platform that handles account setup, identity, and paid access for the O mobile app. Participants create an account with an immutable coordinate identity, choose a free or member tier, pay securely through Stripe, choose a Direction for their contribution, and are then sent back to the mobile app with a secure session.
Next.jsTailwind CSS+2
View Case Study
QuickAssist – WhatsApp Service Booking System
QuickAssist is a smart service booking platform that allows customers to book home services directly through WhatsApp without downloading any mobile application. Customers can easily schedule services such as appliance repair, home cleaning, plumbing, salon services, painting, makeup, and more through an automated WhatsApp assistant. All booking requests are managed in real-time through an admin […]
WhatsApp Business PlatformSupabase+4
View Case Study
Have a similar idea? Let's build it together.
From concept to launch, we turn your vision into a world-class product.