Production access gate
Sign in before opening Realtor appointment operations.
Portal routes are protected by a server-side session cookie. This account gate keeps public traffic out while the v1 experience remains read-only. Realtor appointment visibility is scoped by historical assignment.
HTTP-only session cookie
Secure cookie in production
SameSite lax protection
Schema API token stays server-side