web-auth

Auth Portal

Session, invitation, and portal entry workflows.

Dashboard Access

Restricted

Available Capabilities

0 of 3

Backend Alignment

CASL subjects + tRPC paths

This portal dashboard is restricted by the current portal CASL snapshot.

Session lifecycle

Keeps the portal session state connected to tRPC.

Restricted
Portal CASL
access:SessionCenter
Domain CASL
read:Invitation
tRPC
auth.refreshWired

Invitation acceptance

Accepts onboarding invites through shared contracts.

Restricted
Portal CASL
access:AuthScreen
Domain CASL
create:Invitation
tRPC
invitation.acceptWired

Portal switcher

Shows cross-portal entry only to approved operators.

Restricted
Portal CASL
read:PortalSwitcher
Domain CASL
read:PermissionSet
tRPC
permissionSet.listWired