Authentication · Creator Documentation

The app exposes a dedicated login page at /auth/login. From there, a user can create a new account or sign in with an existing UUID and passphrase.

The auth flow is session-based. Successful login sets the session used by protected routes such as/manage, /create, /admin/users, and /admin/requests.

What the auth page does

Account creation generates a UUID credential, and login validates the passphrase before the app issues a session cookie.

What to expect

Lost UUIDs or passphrases cannot be recovered. If you need a fresh identity, use the create tab on the auth page to generate a new account.

Protected routes

/manage for verified form access.
/create for the builder workspace.
/admin/users and /admin/requests for admin-only management.

Authentication is separate from creator access: you still need an approved role before managing forms.