Admin

Admin Login

Sign in with a Supabase user that has an admin role. Access is checked server-side against the admin user table, app metadata, or the configured admin email allowlist.

No shared review token is required for normal production access.

Sessions use short-lived Supabase JWTs and server-side role checks.

Create admin users in Supabase. Keep the shared-token fallback off except for a short, reasoned break-glass window.