This dashboard is protected with JWT-backed sessions, httpOnly cookies, and backend authorization checks.