Secure login

Login is designed as a protected portal, not a public admin shortcut.

The live login form stays disabled until HTTPS, encrypted storage, owner/guest roles, MFA, and audit logs are deployed. This page documents the process so we do not accidentally collect sensitive data in preview.

Preview-safe gate

Portal login disabled until security launch.

No passwords, identity documents, payment details, or guest records are collected here yet. Approved guests will receive a secure one-time link after the owner approves fit, dates, and screening steps.

Production requirement: HTTPS + secure cookies + short-lived magic links + MFA rules + encrypted database + audit logging. Local role preview is disabled unless NEXT_PUBLIC_RFJ_ENABLE_LOCAL_PORTAL_LOGIN=true.

Process

How login should work.

Guest clicks Login after an approved inquiry.

System sends a one-time magic link to the verified email/phone on file.

Guest completes MFA when required and lands in the guest portal.

Guest can view booking status, contract status, payment links, documents, move-in notes, and maintenance/messages.

Owner/admin login uses separate role-based access, MFA, audit logs, and no public admin links.

Review encryption plan