uniquedesigns.io/admin

Sign in

Google here means Cloudflare Access in front of /admin, on the free plan, allowing exactly one Google account. When Access is on, this page is never seen: Cloudflare shows its own login and hands the Worker a signed identity header. The email form exists for the day Access is off or a second person needs a password.

Skip to Today → · About this proposal

What this screen assumes

One user. No roles, no invitations. If a second person ever packs boxes, that is a later screen.
Cloudflare Access is the preferred door. It is free for up to 50 users, needs no code, and the Worker only has to check the Cf-Access-Jwt-Assertion header. The password form is the fallback, not the plan.
The admin is its own deploy. A Worker with D1 behind Access, separate from the Pages project that serves the shop, exactly as site/wrangler.toml already says: a bad admin deploy must never take the shop down.
Sessions are long. A phone in the print room should not be signing in every hour. Access defaults to 24h; set it to a week.