Publisher

Control Plane

Continue with Google

Access is by invitation. Signing in with a provider identifies you; it does not grant access on its own. If you have not been invited, ask an administrator.

Passwords are set from the command line with npm run auth:password. There is no shared password per role — every audit entry has to name a person.

Sessions last 12 hours and are stored as a revocable row, not a signed token, so removing someone’s access takes effect immediately.