Platform
Admin console
Restricted administration for the LYFE-ID authority itself. Access is granted by server-side role, never by a browser flag.
Planned scope
Route and navigation are live. The detailed interface for this section is still being built.
- Organizations, users, memberships, roles and permissions
- Products and services registration with per-app scopes and callbacks
- Access requests and approvals
- Service accounts: narrow, short-lived, audience-bound, revocable — no master API key
- Sessions, security events and audit logs
Screen build in progress
This section is scaffolded, not simulated. It will read through the typed LYFE-ID service layer once the dedicated LYFE-ID Supabase project is provisioned.
How admin access will be decided
Administrative authority comes from a separate role table checked by a security-definer function in the database. It is never stored on a profile row, never read from browser storage, and never inferred from a client flag such as is_admin.