Build an Authenticated MiniUp App

An authenticated MiniUp app combines a Site frontend with Site Access and a Site Members Function. MiniUp provides trusted member identity; your Function decides which application operations each member may perform.

Understand the application pieces

Browser
   ↓
MiniUp Site
   ↓
/api/functions/my-api/...
   ↓
Site Members Function
   ↓
private data / external APIs

Build the app step by step

1. Publish frontend files in a MiniUp Site.
2. Choose Invite-only or Private Site Access if the frontend itself should be protected.
3. Invite members and assign roles.
4. Create a Site Members Function linked to that Site.
5. Use env.MINIUP_USER for trusted identity and check permissions inside every protected backend operation.
6. Add private credentials through Function Secrets, then publish the Function.
7. Optionally implement a bootstrap endpoint to tell the frontend which features to display.
8. Test the complete app as Owner, as Viewer, and while signed out.

Example: a staff reports portal

Everyone in the Site can see a dashboard. Editors can view reports. Owners and Admins can perform administrative actions. The frontend uses feature flags to show appropriate navigation, while each corresponding backend route enforces the same permission before returning data or making changes.

Frontend controls what users SEE. Backend controls what users MAY DO. Hiding an Admin button is a convenience for users, not API protection.

Related guides

• Complete member dashboard example
• Bootstrap an authenticated app
• Enforce backend authorization