Workforce sign-in

Sign in with your workforce username

Console signs you into the shared workforce/internal realm through a server-owned web boundary, then uses an encrypted session cookie to protect the current browser session.

Expected username styleberry.adminWorkforce identities use globally unique usernames. Email is used for recovery, not sign-in.

Supportsupport@dopal.coInvite acceptance, recovery, and email verification all route through Console.

Trusted web boundary first

Console is the workforce web front door. It is not a web fallback for Operator, and it should not expose raw workforce bearer tokens to browser JavaScript.

HTTP-only sealed session cookies keep browser scripts away from Auth tokens.

State-changing app routes require same-origin requests and no-store responses.

Operator updates remain a signed installer plus updater milestone after this branch.