The first line becomes the title. The issue includes the page you came from, without its query or fragment.
JavaScript is required for admin sign-in. Public pages remain available without signing in.
Your browser can use a passkey from another device through its native QR-code flow. Signing in does not automatically enroll this device.
Give a local script or agent temporary full admin access to application APIs. Tokens cannot mint more tokens or manage sign-in credentials. Copy the token now; it cannot be retrieved later.
Your device asks for its PIN or biometrics. Passkeys may sync through your credential provider. Their private keys are not stored by this website.
Verify a passkey within the last five minutes to issue one single-use login code. A code-assisted session cannot issue more codes. You may explicitly enroll a passkey on the new device, then verify it.
This revokes every passkey, personal access token, outstanding login code, and admin session. Nobody can sign in again until you run npm run auth:reset locally with Azure-owner access. It does not delete website projects or documents.
npm run auth:reset