Sign in with Supabase Auth
This browser stores the Supabase access and refresh session needed for staff continuity. FastAPI verifies the JWT and a club-scoped role assignment before the session becomes usable. Service-role keys never go to the browser.