Sign in
Magic-link authentication. We'll email you a one-time link that expires in 15 minutes.

Links expire in 15 minutes and can be used once.

Other sign-in methods (deferred)

M365 SSO and Google Workspace SSO are scoped to a follow-up phase. Until then, every operator signs in via magic-link.

Dev bypass
AUTH_MODE=dev only. Mints a local operator token without a magic-link round-trip.

Issues an HS256 operator token via packages/auth's dev-mode secret. The Tenant API verifies it on every call. The session expires after 8h.