My Orders

Production version: authenticate customers or use a short-lived signed order lookup link. Never expose all orders through a public order-number search.