MetroTek Access

Prototype the full WorkOS AuthKit journey locally.

These lightweight routes mirror the places you will drop session, MFA, and role checks once AuthKit is wired up.

Auth states

Guest → User → Admin

Swap the stubbed guards with WorkOS AuthKit helpers to light up full authentication without refactoring your UI.

  • • Drop in AuthKitProvider
  • • Fetch session metadata server-side
  • • Branch UI on role + organization
Guest access

Public Guest Lounge

Static marketing-style surface to confirm unauthenticated visitors can see the right information.

Explore page
User access

Signed-in Workspace

Base-level authenticated experience with personalized data and quick links to WorkOS powered flows.

Explore page
Admin access

Control Center

High-signal dashboard reserved for privileged operators. Expect granular authorization checks.

Explore page

Integration outline

Wire AuthKit in three passes

  1. 1. Session plumbing. Mount provider, hydrate user data, and surface fallback UI for guests.
  2. 2. Role gating. Lock down this Admin dashboard, then branch the user home into contextual modules.
  3. 3. Polish. Add account switchers, organization scoping, and WorkOS-powered MFA prompts.

Plug in real auth here

This sandbox intentionally omits authentication. Once you import WorkOS, replace the placeholder guards on the User and Admin pages with live checks.

Tip: create a shared withRole helper so you can reuse gating logic across server and client components.