Secure account access is being connected.

Passwordless customer access and stronger admin MFA remain fail-closed until the selected authentication provider is configured and verified.

Guest purchases

Future buyers may check out without an account, then use a short-lived, one-time purchase-claim link. Order details never appear in an unsigned URL.

Admin access

Admin routes require an explicit allowlist, a verified second factor, recent reauthentication for sensitive actions, and server-side authorization on every request.