Admin Overview
The Open Sky Commerce admin panel is accessible at /admin/dashboard. It is protected — only users with the ADMIN role can access it. All admin routes validate the session server-side on every request.
Accessing the Admin Panel
- Navigate to
/admin/dashboard(or just/admin). - You will be redirected to the sign-in page if not authenticated.
- Sign in with an account that has the
ADMINrole. The default admin credentials are inseed-data/User.json— change the password immediately after first login.
Admin Sections
The sidebar is divided into five groups: main navigation, Products, Categories, Settings, Customization, and Blog. Below is a reference for every section.
Dashboard
/admin/dashboard
The landing page after logging into admin. Shows a sales chart (revenue over time), order statistics, a pie chart of order statuses, and a Recent Orders table with the latest customer purchases. Use this as a daily snapshot of store activity.
Orders
/admin/orders
Full order history with filtering by status and search by customer name or order number. Click any order to view line items, payment method, shipping address, and order total. You can update the order status and payment status from this view. See the Orders documentation for full detail.
Customers
/admin/customers
A list of all registered customer accounts with their email, registration date, and order count. Useful for support lookups and understanding your customer base.
Products → All Products
/admin/products
Paginated list of all products. Each row shows the product thumbnail, name, price, stock level, and category. From here you can edit or delete individual products.
Products → Add Product
/admin/add-product
Form for creating a new product. Fields include: name, slug, description (rich text editor), price, compare-at price, stock quantity, SKU, category assignment, images (uploaded to DigitalOcean Spaces), variants, custom attributes, and additional information sections.
Categories
/admin/categories
Manage product categories. Each category has a name, slug, image, and optional parent category for hierarchical nesting. Categories appear in the storefront navigation and on category listing pages.
Coupons
/admin/coupons
Create and manage discount codes. Set the code string, discount type (percentage or fixed amount), value, optional expiry date, and maximum usage count.
Reviews
/admin/reviews
View and manage product reviews submitted by customers. Each review has a star rating, written content, and is linked to a product by slug. You can add reviews manually (useful for seeding social proof) or edit and delete existing ones.
Settings → Account Settings
/admin/account-settings
Update the currently logged-in admin user's name, email, and profile image. Also includes a password change section with current-password confirmation.
Settings → User Management
/admin/user-management
View all registered users (customers and admins). Admins can change any user's role between USER and ADMIN. Use this to grant or revoke admin access.
Settings → Payment Settings
Admin only/admin/payment-settings
Configure which payment processor is active and enter credentials for Stripe, Authorize.net, Clover, and Square. Sensitive keys are stored encrypted. Only users with the ADMIN role can access this page. See the Payment Processors documentation.
Customization → Business Info
/admin/business-info
Set your company's name, tagline, address, city, state, ZIP, phone numbers, and email. This data is displayed in the contact page, footer, and email templates. The tagline is also used as the hero heading on the Services homepage variant.
Customization → SEO Settings
/admin/seo-settings
Configure the site name, global meta description, OG image URL, and — critically — the homepage variant (eCommerce, Services, SaaS, or Content). Changing the homepage variant here takes effect immediately without redeployment.
Customization → Header Settings
/admin/header-settings
Configure promotional header content such as announcement bar text and enable/disable the header announcement.
Customization → Hero Banner
/admin/hero-banner
Manage the banner images that appear in the eCommerce homepage hero section. Each banner has an image, headline, subheadline, CTA button text, and CTA link. Banners can be reordered via drag-and-drop.
Customization → Hero Slider
/admin/hero-slider
Manage slides for the hero carousel. Similar to Hero Banner but used for the full-width sliding carousel layout. Each slide has an image, title, subtitle, and link.
Customization → Countdown
/admin/countdown
Create and manage countdown timer events linked to featured products. Set the event end date and time — a live countdown timer appears on the homepage to drive urgency for limited-time sales.
Customization → Privacy Policy
/admin/privacy-policy
Edit the privacy policy page content using a rich text editor. Content is saved to the database and rendered at /privacy-policy.
Customization → Terms & Conditions
/admin/terms-conditions
Edit the terms and conditions page content using a rich text editor. Rendered at /terms-condition.
Blog → Posts
/admin/posts
Create, edit, and delete blog posts. Each post has a title, slug, rich text body (with image embedding), featured image, author, category, and tags. Posts appear on the /blog listing page and individual /blog/[slug] detail pages.
Blog → Post Authors
/admin/post-authors
Manage author profiles. Each author has a name, bio, avatar image, and optional social links. Authors are assigned to posts and displayed on post detail pages.
Blog → Post Categories
/admin/post-categories
Create and manage blog post categories. Categories are used to group posts and enable category-based browsing at /blog/categories.
Role-Based Access
Open Sky Commerce has two user roles:
- USER — Default role for customer accounts. Can browse the store, place orders, manage their own account, and write reviews.
- ADMIN — Full access to the admin panel. The Payment Settings page is additionally restricted so that only admins (not editors) can view or change payment credentials.
Role assignment is managed under Admin → Settings → User Management.
Security Notes
- All admin routes check the session on the server. There is no client-side-only guard that can be bypassed.
- Change the default admin password before deploying to a public environment.
- Do not share admin credentials. Create separate admin accounts for each team member who needs access.
- The Payment Settings page stores credentials encrypted. Keys are never returned to the browser — they are read server-side at transaction time only.