← All explorersSigning in →
Authentication Flow
Passwordless email + one-time code, step by step, and why script on the page cannot read the session. Press play to watch the whole handshake.
Driven by real source:
server/src/modules/platform/auth/**Trialion is passwordless: there are no usernames or passwords, only an e-mail address and a one-time code. The browser holds a sealed, httpOnly session cookie that script on the page cannot read: the Backend-for-Frontend (BFF) keeps the tokens inside it and adds them to each call itself.
BrowserBFFAPIE-mail