authentication / email + google

Enter your workspace.

Passwords are hashed with scrypt. Sessions are a hashed token in SQLite with only the raw value in an HTTP-only cookie.

Set GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET in .env.local to enable Google sign-in.