Restrict direct access to NextJS routes - Theo's Typesafe Cult