3 commits

Author	SHA1	Message	Date
jtricerolph	3052113d31	Shared kiosk sessions: app kiosk registry, kiosk login, verify support, admin password ... apps gain kiosk_path/kiosk_caps (hvac registered first). One shared kiosk password mints a long-lived hnf_kiosk_session carrying only each registered app's kiosk caps; /verify answers for kiosk sessions; changing the password bumps an epoch that invalidates signed-in tablets. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-15 11:15:46 +00:00
jtricerolph	f08d53d702	Add internal registry endpoint, self-registration, and workforce sync ... - Register internalRoutes at /api/auth/internal (used by management) - Add registerRoutes for staff self-registration flow - Add workforce sync job (runs on schedule, fails gracefully if unconfigured) - Add email.js for registration/invite emails Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-07-01 20:35:44 +00:00
jtricerolph	372e71c8f5	Initial commit: auth	2026-07-01 12:09:54 +00:00