Loading shell
Preparing the review workspace
FacturaReady Inbox keeps the human reviewer in control while the operational surface comes online.
Loading navigation
Checking tenant context
Warming dashboard cards
Loading shell
FacturaReady Inbox keeps the human reviewer in control while the operational surface comes online.
Identity and tenant access
`TASK 009` adds the first real login and tenant session boundary for GestoriaOS. Every downstream document, export, and audit workflow will inherit this access contract.
Session cookie
The API issues an HTTP-only cookie and resolves the current tenant membership on each request.
Tenant lock
Cross-tenant requests are rejected before any business data query can continue.
MVP boundary
No public signup, no social auth, and no broad admin suite outside the blueprint.
Login flow
For local verification, use a seeded user record from tests or a manually inserted tenant membership. The login form keeps tenant slug explicit so multi-tenant access stays deliberate.