DEO
Login
Access
Sign in to the labeling workspace.
Signed browser sessions are backed by the existing users and
sessions tables.
DB-backed sessions
Lockout preserved
CSRF on auth forms
Login
Invalid credentials return a generic error. Locked accounts return a timed lockout message.
Auth Requirements
- Signed browser sessions backed by the existing users and sessions tables.
- Forced password reset support and timed lockout behavior.
- Role gating before protected pages and write actions.