Protected workspace

Login required

This page is locked down with a server-side session cookie. After login, the app shell, scripts, uploads, and API routes are only available to authenticated users.

JWT is stored in an httpOnly cookie, not localStorage.

Unauthorized visitors are redirected here automatically.

You can log out later with a dedicated auth endpoint.

Sign in

Use the admin credentials configured on the server.

Credentials are configured in `.env` via `ADMIN_USERNAME`, `ADMIN_PASSWORD`, and `JWT_SECRET`.