Agora

Operator sign-in

The token is verified by the backend and stored in an httpOnly session cookie — it is never exposed to page scripts.