Production access gate
Sign in before opening Realtor appointment operations.
Portal routes are protected by a server-side session cookie. This basic shared credential gate keeps public traffic out while the v1 experience remains read-only.
HTTP-only session cookie
Secure cookie in production
SameSite lax protection
Schema API token stays server-side