Standalone admin

Rawi control room

This dashboard is intentionally isolated from the public site. Only `admin` and `super_admin` sessions can enter after `/auth/me` confirms the role.

Access policy

  • Email/password and Google OAuth both flow through the same backend auth service.
  • Any authenticated non-admin is rejected immediately from this app.
  • `/auth/refresh` silently recovers stale sessions before the app gives up.