raidlab — gaming hub & membership platform

Overview

raidlab is a gaming content hub built for a client, where access to products, tools, guides, live streams, and videos is gated by subscription plan. It runs on the Next.js 16 App Router with three route groups — public, members, and admin — each enforcing its own authorization layer.

Subscriptions and billing are handled through Stripe, authentication through Better Auth, and all content is managed by an admin CMS for the ADMIN and EDITOR roles. Every mutation flows through typed Server Actions with Zod validation and Drizzle queries.

Key features

• Plan-based access controlA two-layer gate — cookie auth in the proxy, then a plan matrix at the layout — decides what each member can reach.
• Admin CMSADMIN and EDITOR roles manage products, tools, guides, streamers, and videos through CRUD forms over the same entities.
• Stripe subscriptionsTiered plans and billing handled through Stripe Checkout and webhooks that keep subscription state in sync.
• Rate-limited authSign-in is throttled per Cloudflare IP and the proxy applies a per-IP global limit to harden against abuse.

The challenge

Keeping authorization consistent across every domain was the hard part: each entity needs the same parse → authenticate → authorize → query → revalidate pipeline, with plan checks that an authenticated free item can override. A single reference implementation defines the contract every action follows.

Gallery