Web application baseline

Verified session boundary

Enter through one trusted door.

Credentials are exchanged directly with Supabase Auth. Server access is granted only after the returned JWT signature and claims have been verified.

Sign in

Access is limited to existing or invited accounts.

Signup mode: disabled. This value is explicit server configuration, never inferred from the hosted provider.