Protected foundation
Auth is narrow on purpose.
Phase 1 focuses on credentials auth, JWT sessions, and a mandatory onboarding flow. Password reset, social auth, and team roles stay out until later.
Auth.js uses credentials login with JWT sessions and cookie auth.
Registration creates the user only. Company, membership, and subscription are created in onboarding.
Protected dashboard routes stay gated until onboarding is complete.
Remember your password? Log in.