Last verified: 2026-05-19
Sign in and account access
Sign in, recover passwords, verify email, and reach the correct dashboard for your role.
Auth routes (public)
| Path | Purpose |
|---|---|
/login | Sign in with email/password (or configured OAuth) |
/forgot-password | Request password reset email |
/reset-password | Set a new password from email link |
/verify-email | Confirm email after registration |
Dashboard home by role
| Role | Home route | Profile settings |
|---|---|---|
| Admin | /admin | /admin/profile |
| Staff | /staff | /staff/profile |
| Customer | /customer | /customer/profile |
| Superadmin | /superadmin | /superadmin/profile |
Steps — standard sign-in
- Go to
/login(or your tenant’s branded login URL). - Enter credentials and submit.
- Confirm redirect to the dashboard for your role (table above).
- If prompted, complete verify-email before accessing restricted features.
Steps — staff invitation (first time)
- Open the invitation link from email:
/invite/{token}. - Validate token (invalid/expired tokens show an error from
/api/invite/validate/{token}). - On Staff Invitation, choose:
- Sign In & Accept Invitation, or
- Create Account & Accept Invitation (name + password fields).
- After success, you are redirected to
/staff.
Invitations expire after 7 days.
Steps — new merchant onboarding
New admins may be routed through /(onboarding)/ flows (e.g. payment, freemium) before full /admin access. Complete each onboarding step until you reach the dashboard.
Marketing help links (placeholders)
| Path | Current behavior |
|---|---|
/help-center | Hub linking to documentation, status, contact |
/documentation | Static intro; full KB will deploy separately |
Verify it worked
- Session persists across refresh (no redirect loop to
/login). - Profile page loads for your role.
- Staff invitation shows organization name and assigned locations on
/invite/{token}before accept.
Common issues
| Symptom | Likely cause | What to do |
|---|---|---|
| Redirect loop | Cookies blocked / expired session | Allow cookies; clear site data; retry |
| Wrong dashboard | Multiple accounts/roles | Sign out; use correct email |
| Invitation expired | > 7 days | Ask admin to resend from Staff Invitations |
| “Invalid invitation token” | Bad or used link | Request new invite |
