Public Auth Surface
Sign in to Word Hamster
Email/password and magic link are both wired. Redirects are sanitized before they reach the app surface, and the protected area stays fail-closed if auth configuration is missing.
- Requested destination after login/app
- Current auth postureConfigured