GateFluxUser Guides

Authentication, Identity, and Security

Implement and operate login, 2FA, RBAC, sessions, and profile security controls consistently.

Implemented Modules

  • Authentication - login/register/logout, OTP, session management
  • Two-Factor Authentication (2FA) - setup, challenge, recovery codes
  • Role-Based Access Control - role templates and capability gates
  • Profile Security Controls - password, sessions, and security preferences

Recommended Setup Order

  1. Configure role templates and core capabilities first.
  2. Enable 2FA policy for admin and finance-sensitive roles.
  3. Validate session revoke and password reset flows.
  4. Run role-based menu checks in admin and resident views.

Cross-Layer Contract Checks

  • API: Keep auth payload and error shape stable across login, refresh, and session endpoints.
  • App: Use capability-driven rendering and route guards, not static role assumptions only.
  • Mobile: Keep OTP and session behavior aligned with backend auth responses.

Security Checklist

  • Use 2FA for privileged roles.
  • Review active sessions regularly and revoke unknown devices.
  • Audit permission-denied events and failed logins from logs dashboards.
← Platform ConsoleHardware Access →