### Bug Fix Plan for Order Cancellation Error

**The Problem:**
When you click "Cancel Order" from the customer dashboard, it triggers the `cancelOrder()` function in `App\Http\Controllers\Frontend\CustomerController.php`. 
Inside this function, there is a security check that attempts to verify if the logged-in customer is the owner of the order:
`if (session('customer_id') != $order->customer_id)`

However, the login system uses Laravel's built-in `Auth` system, not manual session keys. Because `session('customer_id')` is empty, it fails the check and mistakenly throws the "Unauthorized action." error.

**The Solution:**
I will update `CustomerController.php` to use the correct `Auth` checking method.
1. **Fix Cancel Action:** I will change the check in `cancelOrder` to properly use: 
   `if (auth('customer')->id() != $order->customer_id)`
2. **Security Bonus (Order Details):** I noticed that the `orderDetails()` function right above it does not check if the order belongs to the customer. I will add the same proper `auth('customer')->id()` check there so other customers cannot guess the URL and view someone else's order.

Please review this plan. Give me the confirmation to proceed and I will implement these fixes immediately!