Wireframe / Auth

Secure entry for every account flow.

Keep login minimal, fast, and explicit. The Next.js layer proxies credentials to the Java gatekeeper, and the gatekeeper owns the auth schema and token lifecycle.

  • Login posts to Spring Boot, never directly to PostgreSQL.
  • HTTP-only cookies are issued in the web layer after a successful auth response.
  • Recovery, rate limits, and future MFA can evolve without changing game-schema ownership.

Account login

Connected to the current Java auth contract for email and password sign-in.

Login uses secure HTTP-only essential cookies for the web session. No optional analytics or marketing cookies are required for sign-in.